Static task
static1
Behavioral task
behavioral1
Sample
2459c970e988df23a7652d86ada8be3eb748cd61b23e4b839505ff67d6856620.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2459c970e988df23a7652d86ada8be3eb748cd61b23e4b839505ff67d6856620.exe
Resource
win10v2004-20220812-en
General
-
Target
2459c970e988df23a7652d86ada8be3eb748cd61b23e4b839505ff67d6856620
-
Size
416KB
-
MD5
79474afd20d9008a1618598d5a6ad276
-
SHA1
4dc594378d79a9606d968267b944f0717c10e86d
-
SHA256
2459c970e988df23a7652d86ada8be3eb748cd61b23e4b839505ff67d6856620
-
SHA512
ef24e94528d17dc1fa30881f56c9efde3a35ad5458a5f4fbbcf0d123207dd7779e4b13c99fc159910cd7de21399c7ffaad910669f92f96a8003549a92926d442
-
SSDEEP
6144:Kbx/KxqzLy9dVnqyCgUtsrVDsweOpXECCMbmuZUyMnOQHpIRhLh5h:KV/K8snqyCyQweONEeCuZbWOQpILL
Malware Config
Signatures
Files
-
2459c970e988df23a7652d86ada8be3eb748cd61b23e4b839505ff67d6856620.exe windows x86
ab2680ed10addc59c9a73012faee24a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetUserObjectInformationW
ShowWindow
DestroyWindow
MessageBoxA
CreateWindowExW
EndPaint
RegisterClassA
AdjustWindowRect
OemToCharBuffW
CreateIconFromResource
UnregisterClassA
ModifyMenuA
SetCursor
GetWindowThreadProcessId
GetParent
GetClassLongW
LoadImageA
RegisterClassExA
DrawFrameControl
SetScrollInfo
ShowWindowAsync
DefWindowProcW
GetGuiResources
SetPropA
DdeKeepStringHandle
GetCaretPos
OemToCharW
IsClipboardFormatAvailable
kernel32
VirtualAlloc
SetFilePointer
TlsFree
GetSystemTimeAsFileTime
GetLogicalDrives
SetCurrentDirectoryA
GetStringTypeExA
ReadConsoleA
GetProfileStringA
GetVersionExA
IsDebuggerPresent
VirtualFree
GetOEMCP
GetProcessHeap
LCMapStringW
IsValidCodePage
GetCurrentThreadId
FindResourceExA
ExitProcess
FillConsoleOutputCharacterW
GetCommandLineA
WaitForDebugEvent
lstrcpyW
DeleteCriticalSection
InterlockedDecrement
GetLastError
GetProfileIntA
CreateFileA
CompareStringA
DeleteFileA
SetUnhandledExceptionFilter
SetHandleCount
FreeEnvironmentStringsA
GetTickCount
GetProfileStringW
CreateMutexA
SetConsoleOutputCP
VirtualQuery
GetConsoleCP
GetProcAddress
ReadFile
GetComputerNameA
HeapSize
SetLocaleInfoA
GetEnvironmentVariableA
SetStdHandle
InterlockedIncrement
TlsSetValue
SystemTimeToFileTime
MapViewOfFileEx
GlobalDeleteAtom
GlobalHandle
CommConfigDialogA
GetConsoleOutputCP
LeaveCriticalSection
GetModuleHandleA
TransactNamedPipe
CreateMutexW
FindResourceA
GetCurrentProcess
GetStartupInfoW
GetFileType
LoadLibraryA
CreatePipe
GetEnvironmentStringsW
FreeResource
GlobalReAlloc
GetConsoleMode
GetLocaleInfoW
GetModuleFileNameW
GetCompressedFileSizeW
GetStringTypeA
IsValidLocale
MoveFileExW
GetCommandLineW
EnumCalendarInfoExW
GetPrivateProfileIntA
SetLastError
WideCharToMultiByte
ExpandEnvironmentStringsW
GetCurrentProcessId
CompareStringW
GetNamedPipeHandleStateA
TlsGetValue
Sleep
TlsAlloc
ResumeThread
ConnectNamedPipe
OpenMutexA
RtlUnwind
GetNumberFormatA
GetCPInfo
GetStartupInfoA
LCMapStringA
CreateWaitableTimerW
WriteConsoleW
EnterCriticalSection
EnumTimeFormatsA
LocalShrink
GetUserDefaultLCID
CreateNamedPipeA
QueryPerformanceCounter
FreeLibrary
CloseHandle
GlobalFree
TerminateProcess
GetCurrentThread
HeapDestroy
HeapReAlloc
GetLocaleInfoA
HeapCreate
SetFileTime
SetConsoleScreenBufferSize
WriteFile
FreeEnvironmentStringsW
GetNamedPipeInfo
GetEnvironmentStrings
GetStdHandle
WriteConsoleOutputCharacterW
GetDateFormatA
DuplicateHandle
ReadConsoleOutputW
UnhandledExceptionFilter
GetStringTypeW
GetModuleFileNameA
HeapAlloc
InitializeCriticalSection
WaitNamedPipeW
WriteConsoleA
GetDiskFreeSpaceExA
EnumSystemLocalesA
InterlockedExchange
GetTempPathW
GetTimeZoneInformation
MultiByteToWideChar
SetConsoleCtrlHandler
VirtualProtectEx
ReadConsoleInputW
GetACP
lstrcatW
SetEnvironmentVariableA
GetTimeFormatA
HeapFree
IsBadReadPtr
FlushFileBuffers
comctl32
MakeDragList
ImageList_Destroy
ImageList_GetFlags
CreateToolbarEx
CreateStatusWindowW
DrawStatusTextW
ImageList_GetImageRect
ImageList_ReplaceIcon
DrawStatusTextA
ImageList_DragShowNolock
CreateStatusWindowA
ImageList_BeginDrag
ImageList_AddIcon
ImageList_SetFlags
InitCommonControlsEx
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ