Static task
static1
Behavioral task
behavioral1
Sample
691b56872e212597a2f870e465d09b791433871c8c8509701173a16938878437.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
691b56872e212597a2f870e465d09b791433871c8c8509701173a16938878437.exe
Resource
win10v2004-20220812-en
General
-
Target
691b56872e212597a2f870e465d09b791433871c8c8509701173a16938878437
-
Size
56KB
-
MD5
370abe07eebdf01a21d1425c5d67b35e
-
SHA1
567f8c8fdf9b39e3e4fef6f6ee5b696180a2ab55
-
SHA256
691b56872e212597a2f870e465d09b791433871c8c8509701173a16938878437
-
SHA512
075fe28bb9dc762002c95ad8e138fb467a411e7db944bf1c888fe79d0311d5729f33be57e0b0d0143448be739949186d36d745d3c2c75c3e8acf25e611824588
-
SSDEEP
768:T9c4m+zG5Ji4nAnNAAEHQD3VwSsfohwlQnOy0VcBVU6DJyGUJ:Tjmb5J2NAAEM3Sfo+qzgydVJUJ
Malware Config
Signatures
Files
-
691b56872e212597a2f870e465d09b791433871c8c8509701173a16938878437.exe windows x86
4cf47722d2e1d09966e55ac93dba9ce8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamW
wsprintfA
IsCharUpperA
FindWindowW
DrawTextW
DefDlgProcA
MessageBoxW
CharToOemA
GetKeyNameTextA
GetMessageA
LoadStringW
DrawEdge
kernel32
SetEnvironmentVariableA
GetOEMCP
GetCurrentDirectoryW
HeapFree
GetLocalTime
FormatMessageA
QueryDosDeviceW
GetStartupInfoW
InitializeCriticalSection
GetDateFormatA
FindFirstFileA
LoadLibraryA
GetFileSize
GetProcAddress
lstrcpyA
ReplaceFileW
GetLongPathNameA
SetLastError
WaitForSingleObject
SearchPathW
shimeng
SE_InstallBeforeInit
SE_ProcessDying
qutil
FreeSoH
FreeFixupInfo
FreeConnections
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ