Static task
static1
Behavioral task
behavioral1
Sample
d95f251484840efb74c8ebb7a2fbfc904be41ec62e64bdb125dd94dc5d7f5d55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d95f251484840efb74c8ebb7a2fbfc904be41ec62e64bdb125dd94dc5d7f5d55.exe
Resource
win10v2004-20220901-en
General
-
Target
d95f251484840efb74c8ebb7a2fbfc904be41ec62e64bdb125dd94dc5d7f5d55
-
Size
414KB
-
MD5
8202ecd499a1ba153a22b74ecc1e2305
-
SHA1
e29955281d51bcf8066c130b816034ae404dd72a
-
SHA256
d95f251484840efb74c8ebb7a2fbfc904be41ec62e64bdb125dd94dc5d7f5d55
-
SHA512
39450c403c7020b2f290068cd85d9d574ccf7daf6936add27699faa8be0641dad4180a593e15cbc5d45330e4c0399afcff23f316eb1cdfaa6f885481d19547ca
-
SSDEEP
12288:Xw4zKQsJeN9kUvInsw0HehUxX1yIxjvilZxuzQIo4N:XdzKGM0+SjyIpilZ40P4N
Malware Config
Signatures
Files
-
d95f251484840efb74c8ebb7a2fbfc904be41ec62e64bdb125dd94dc5d7f5d55.exe windows x86
eccb1cde3e90aed1ab76abe23fd9eac8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
WriteConsoleW
FlushFileBuffers
SetStdHandle
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
GetProcessHeap
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
GetModuleHandleW
IsProcessorFeaturePresent
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
LoadLibraryW
HeapSize
HeapReAlloc
LCMapStringW
GetStringTypeW
CreateFileW
SetEndOfFile
ReadConsoleInputA
SetConsoleMode
GetLastError
GetProcAddress
FreeLibrary
InterlockedDecrement
HeapCreate
HeapAlloc
LoadLibraryA
lstrcatA
HeapFree
CreateDirectoryA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteFile
CloseHandle
ReadFile
EncodePointer
DecodePointer
TlsSetValue
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
user32
GetClientRect
GetMenuItemID
DrawIcon
SetTimer
KillTimer
EnumDisplayMonitors
GetWindowRect
DefWindowProcA
GetDlgItem
ShowWindow
SetWindowPos
GetMenuItemRect
CreateMenu
BeginPaint
ReleaseDC
wsprintfA
GetLastInputInfo
GetSysColor
DestroyWindow
IsWindow
GetWindowLongA
SendMessageA
OffsetRect
InflateRect
GetSysColorBrush
FrameRect
FillRect
CallWindowProcA
EndDialog
SetFocus
SetWindowLongA
GetFocus
PostQuitMessage
GetDC
CreateWindowExA
GetWindowTextLengthA
MessageBeep
GetWindowTextA
SendDlgItemMessageA
GetScrollInfo
SystemParametersInfoA
UpdateWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
RedrawWindow
SetWindowTextA
DrawIconEx
EndPaint
OpenClipboard
EmptyClipboard
CopyImage
SetClipboardData
CloseClipboard
gdi32
BitBlt
DeleteDC
CreatePen
Polyline
DeleteObject
SaveDC
SetBkColor
ExtTextOutA
RestoreDC
SetBkMode
SetTextColor
GetStockObject
CreateCompatibleBitmap
PatBlt
CreateSolidBrush
Rectangle
CreateHatchBrush
Ellipse
GetDeviceCaps
SelectObject
CreateCompatibleDC
advapi32
GetAclInformation
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
ole32
CoUninitialize
CoCreateInstance
CoInitialize
StgCreateDocfile
OleInitialize
CoGetMalloc
msimg32
GradientFill
comctl32
ord16
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ