Static task
static1
Behavioral task
behavioral1
Sample
7fd1ceb1b573819769ada3b793986665a69782b6004aed27c86c4d179355c60e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7fd1ceb1b573819769ada3b793986665a69782b6004aed27c86c4d179355c60e.exe
Resource
win10v2004-20221111-en
General
-
Target
7fd1ceb1b573819769ada3b793986665a69782b6004aed27c86c4d179355c60e
-
Size
807KB
-
MD5
23bb2d1522bdded949e381f12c0cb49b
-
SHA1
f7df51f9bd3d60926fbcc53b62c269d87a7fda1c
-
SHA256
7fd1ceb1b573819769ada3b793986665a69782b6004aed27c86c4d179355c60e
-
SHA512
cccc00861189e5d53ac9d26af267e788cd94afc62485eff40f3d04e74c5125deeac68bdc51964662f1baedf0cf1c2803b42fc20c8f7ababba79cc8c48c3bdd70
-
SSDEEP
12288:an4dih9cGXrmJvb5n3uLZIKeFVPzmbDK75vuJ2rUtiM3sfgxI:a44hx8UefPzmbO75vBrLf5
Malware Config
Signatures
Files
-
7fd1ceb1b573819769ada3b793986665a69782b6004aed27c86c4d179355c60e.exe windows x86
f79c6dc0d51b0e2f563b2103e8cd7b83
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
InitializeCriticalSection
LoadLibraryW
InitializeCriticalSection
LocalAlloc
DeleteCriticalSection
GetVersionExA
GetProcAddress
InitializeCriticalSection
CreateFileW
LoadLibraryW
GetVersionExA
GetSystemTimeAsFileTime
SetLastError
Sleep
GetModuleHandleA
lstrlenA
GetModuleHandleA
LocalAlloc
LocalFree
HeapDestroy
GetCurrentProcess
HeapAlloc
MultiByteToWideChar
GetVersionExA
lstrlenA
SetLastError
GetModuleFileNameW
CreateEventW
SetLastError
LoadLibraryW
Sleep
InterlockedIncrement
EnterCriticalSection
DeleteCriticalSection
ReadFile
HeapAlloc
lstrcmpiW
LocalFree
DisableThreadLibraryCalls
CreateFileW
LoadLibraryA
GetModuleHandleW
CreateThread
GetModuleHandleW
MultiByteToWideChar
GetSystemTimeAsFileTime
InterlockedIncrement
CreateEventW
HeapFree
InterlockedExchange
GetLastError
VirtualProtect
ReadFile
ReadFile
HeapFree
LeaveCriticalSection
GetTickCount
CreateFileW
LocalAlloc
InterlockedDecrement
VirtualAlloc
LeaveCriticalSection
LocalFree
GetTickCount
LeaveCriticalSection
DeleteCriticalSection
VirtualProtect
GetModuleHandleW
GetSystemTimeAsFileTime
Sleep
FreeLibrary
GetCurrentProcessId
GetProcessHeap
GetModuleFileNameW
GetTickCount
HeapFree
LoadLibraryW
Sleep
UnhandledExceptionFilter
GetVersionExA
GetModuleHandleA
GetModuleHandleA
LocalAlloc
GetCurrentProcess
GetCurrentProcess
InterlockedIncrement
GetLastError
InterlockedIncrement
VirtualProtect
UnhandledExceptionFilter
Sleep
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetCurrentThreadId
VirtualProtect
VirtualProtect
UnhandledExceptionFilter
GetProcAddress
CreateFileW
CreateFileW
InitializeCriticalSection
GetModuleHandleW
Sleep
GetVersionExA
user32
KillTimer
SetTimer
DestroyWindow
wsprintfA
SetFocus
IsDlgButtonChecked
SetWindowPos
IsDlgButtonChecked
EnableWindow
GetDlgItem
PeekMessageW
EndPaint
GetWindowLongW
EndDialog
GetWindowRect
GetParent
DestroyWindow
CharNextW
IsWindow
InvalidateRect
SetWindowTextW
SendDlgItemMessageW
LoadStringW
CreateWindowExW
SendDlgItemMessageW
DialogBoxParamW
PeekMessageW
GetWindowLongW
GetDlgItem
LoadIconW
GetParent
LoadCursorW
GetSysColor
wsprintfA
GetParent
SetCursor
PostQuitMessage
DestroyWindow
LoadCursorW
SendDlgItemMessageW
BeginPaint
DialogBoxParamW
ReleaseDC
SetWindowLongW
ReleaseDC
EnableWindow
GetDC
GetDlgItem
GetWindowRect
SetDlgItemTextW
PostQuitMessage
GetDlgItem
DialogBoxParamW
EnableWindow
wsprintfA
EndPaint
SetForegroundWindow
InvalidateRect
wsprintfA
GetDC
LoadIconW
IsWindow
ReleaseDC
CharNextW
PostQuitMessage
SendDlgItemMessageW
LoadCursorW
LoadStringW
DialogBoxParamW
DispatchMessageW
SetTimer
GetWindowRect
ReleaseDC
DefWindowProcW
SetWindowPos
BeginPaint
GetDC
GetWindowLongW
ReleaseDC
SetWindowPos
SetWindowLongW
PeekMessageW
InvalidateRect
ShowWindow
DispatchMessageW
LoadIconW
GetParent
DestroyWindow
IsDlgButtonChecked
GetDesktopWindow
GetDlgItem
GetSystemMetrics
GetClientRect
DestroyWindow
CharNextW
DestroyWindow
TranslateMessage
SetWindowPos
ReleaseDC
DefWindowProcW
InvalidateRect
GetSystemMetrics
GetFocus
wsprintfA
SendMessageW
BeginPaint
InvalidateRect
SetTimer
SetCursor
Sections
.text Size: 718KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ