Static task
static1
Behavioral task
behavioral1
Sample
02836f758e5dc0e93dcd24850f19b481d07a7dce2b506802f53747caaf93cdc7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
02836f758e5dc0e93dcd24850f19b481d07a7dce2b506802f53747caaf93cdc7.exe
Resource
win10v2004-20221111-en
General
-
Target
02836f758e5dc0e93dcd24850f19b481d07a7dce2b506802f53747caaf93cdc7
-
Size
508KB
-
MD5
8733591ed354d6ee2782b87c4624a925
-
SHA1
57dc954a1a1b1e383553883dfb703ec52f2cc306
-
SHA256
02836f758e5dc0e93dcd24850f19b481d07a7dce2b506802f53747caaf93cdc7
-
SHA512
acdf1d44344cdf021afa62dc4e4d9c72fd0641f56d86fd6dad4c5bfb1f1eaa83364d187c99fdab6f0f8f3cb0b63cc1a537739e715423b31c6f2d088fc73ff4d9
-
SSDEEP
12288:mlzREdEtn0Rlg2yXsxbCM35Kx4hlz7Bhpc:czREO0g2gWbD35ewv1c
Malware Config
Signatures
Files
-
02836f758e5dc0e93dcd24850f19b481d07a7dce2b506802f53747caaf93cdc7.exe windows x86
b12a3c0f94109179976e80550c272a76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
SetWindowLongA
PeekMessageA
MsgWaitForMultipleObjects
LoadStringA
ExitWindowsEx
DispatchMessageA
DestroyWindow
CreateWindowExA
CallWindowProcA
CharPrevA
MessageBoxA
advapi32
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
LookupPrivilegeValueA
opengl32
glTexCoord3dv
glColor4sv
glNormal3iv
glColor4bv
glReadBuffer
glIndexMask
glTexGeni
comctl32
ord17
kernel32
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetFullPathNameA
TryEnterCriticalSection
lstrcpyW
SetPriorityClass
GetCommandLineW
FindFirstVolumeW
WriteConsoleOutputA
WriteTapemark
lstrcatW
CloseHandle
CreateFileA
ExitProcess
GetFileType
GetSystemTime
GetFileSize
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetFilePointer
WriteFile
GetCommandLineA
GetLastError
GetModuleHandleA
MultiByteToWideChar
TlsGetValue
TlsSetValue
WideCharToMultiByte
LocalAlloc
LocalFree
VirtualAlloc
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateDirectoryA
CreateProcessA
DeleteFileA
FindResourceA
FormatMessageA
GetACP
GetCurrentProcess
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetLocaleInfoA
GetModuleFileNameA
GetProcAddress
GetSystemDefaultLCID
GetSystemInfo
GetUserDefaultLangID
GetVersionExA
GetWindowsDirectoryA
IsDBCSLeadByte
LoadLibraryA
LoadResource
LockResource
RemoveDirectoryA
SetErrorMode
SetLastError
SizeofResource
Sleep
VirtualProtect
VirtualQuery
GetSystemTimeAsFileTime
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsAlloc
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 415KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ