Static task
static1
Behavioral task
behavioral1
Sample
d0eb59c206e3131ccd7011e16ecfe61be1d4443ce90e63a066f74fbf5d75d1d0.exe
Resource
win7-20220901-en
General
-
Target
d0eb59c206e3131ccd7011e16ecfe61be1d4443ce90e63a066f74fbf5d75d1d0
-
Size
972KB
-
MD5
726147cb4c6118e1480a5b9691d8d731
-
SHA1
97e45a586127c3147c06f700b171babb4ef9a9ee
-
SHA256
d0eb59c206e3131ccd7011e16ecfe61be1d4443ce90e63a066f74fbf5d75d1d0
-
SHA512
de2866f6e522cf4e463214ed0b1045d90b853fc61402dd867974e6962813b467670cb342901d7aceb112ecb1af9ec8884c42f3ac033d104d1fd8b31de4619df1
-
SSDEEP
12288:LaaaaaaaaabNTgSvG2cKMXb1BIX/HKTYgiaKTMQIQl:+HvGT1fYIQI
Malware Config
Signatures
Files
-
d0eb59c206e3131ccd7011e16ecfe61be1d4443ce90e63a066f74fbf5d75d1d0.exe windows x86
48c6f21a11ee5fd721dfe9bbd6b64d32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
MulDiv
MultiByteToWideChar
OpenFile
QueryPerformanceCounter
RaiseException
SetFileAttributesA
GlobalDeleteAtom
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GlobalAlloc
GlobalAddAtomA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemTime
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetLastError
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetAtomNameA
GetACP
FreeLibrary
FindFirstFileA
FindClose
DeleteFileA
DeleteAtom
CreateThread
CreateFileW
CloseHandle
AddAtomA
Sleep
GetModuleHandleW
SetUnhandledExceptionFilter
VirtualAllocEx
user32
IsRectEmpty
IsWindow
IsWindowVisible
LoadAcceleratorsA
LoadIconA
LoadStringA
LoadStringW
MessageBoxA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseDC
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetRectEmpty
SetWindowTextA
ShowWindow
TranslateAcceleratorA
TranslateMessage
IsClipboardFormatAvailable
InvalidateRect
InsertMenuA
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollRange
GetMessageA
GetMenu
GetKeyState
GetDlgItemTextA
GetDlgItem
GetDC
GetClipboardData
GetClientRect
EnumThreadWindows
EndDialog
EnableMenuItem
DrawIcon
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CloseClipboard
CheckDlgButton
CharUpperBuffA
CharNextA
CharLowerA
LoadIconW
LoadCursorA
LoadCursorW
EnableScrollBar
gdi32
SetTextAlign
SetTextColor
GetStockObject
SetLayout
SetWindowOrgEx
TextOutA
TranslateCharsetInfo
SetBkMode
SelectObject
SetBkColor
PatBlt
SetWindowExtEx
GetEnhMetaFileA
GetLayout
GetDeviceCaps
DeleteObject
CreateMetaFileA
CreateFontIndirectA
CopyMetaFileA
CloseMetaFile
GetEnhMetaFileW
GetTextExtentPoint32A
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegOpenKeyA
RegQueryValueExA
shell32
ShellExecuteExA
ShellAboutA
ExtractAssociatedIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ole32
CoInitialize
CoUninitialize
CoCreateInstance
shlwapi
PathFindExtensionW
msvcrt
_adjust_fdiv
strchr
memmove
exit
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnprintf
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 937KB - Virtual size: 937KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ