Static task
static1
Behavioral task
behavioral1
Sample
1d7a2e676cbc87b29ef01ad962b11a5b440e78909e239bd4ab6f61f394005a63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d7a2e676cbc87b29ef01ad962b11a5b440e78909e239bd4ab6f61f394005a63.exe
Resource
win10v2004-20220812-en
General
-
Target
1d7a2e676cbc87b29ef01ad962b11a5b440e78909e239bd4ab6f61f394005a63
-
Size
145KB
-
MD5
5ef96bd2ee938a765483326c2cf74067
-
SHA1
a71b05078d8b996e8be887430e0bfac45c9ea682
-
SHA256
1d7a2e676cbc87b29ef01ad962b11a5b440e78909e239bd4ab6f61f394005a63
-
SHA512
3d9c9af5feaecfb792a65b86efe25278508824c980de20573465ed78a2cfb5e846eb2e93e945bf97d642a9d62503e22a10164b944e366b320b5cf6af2246997a
-
SSDEEP
3072:zF9ibheBLgUrU4kQl+nZtjifo/VZIjZXGLp7qqfgXdDpIMTh3k:ggOjQl+n7jF/HqergtpIUk
Malware Config
Signatures
Files
-
1d7a2e676cbc87b29ef01ad962b11a5b440e78909e239bd4ab6f61f394005a63.exe windows x86
49fd84ad803099c8d2037aa5c25c2041
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCaretBlinkTime
GetMonitorInfoA
GetTitleBarInfo
SetMenuContextHelpId
GetDlgItemTextA
SystemParametersInfoW
FillRect
ScreenToClient
SetClassLongW
GetClassInfoA
MoveWindow
CharUpperW
CharLowerW
ClientToScreen
MonitorFromWindow
InvalidateRect
GetNextDlgGroupItem
GetLastActivePopup
DrawCaption
GetWindowRgn
ExcludeUpdateRgn
SetWindowsHookExA
CloseClipboard
GetParent
EnableWindow
GetClipboardViewer
GetThreadDesktop
ToAsciiEx
GetWindowDC
TrackPopupMenu
IsChild
SetUserObjectInformationW
MapDialogRect
EnableMenuItem
MapVirtualKeyExA
GetLayeredWindowAttributes
ReplyMessage
GetInputState
SetWindowsHookA
GetGUIThreadInfo
RedrawWindow
GetScrollRange
GetSystemMetrics
SetForegroundWindow
SetWindowPos
SetSystemCursor
ArrangeIconicWindows
AnyPopup
RealChildWindowFromPoint
CountClipboardFormats
ole32
CoTaskMemFree
gdi32
CreateFontIndirectA
CreateRectRgnIndirect
MoveToEx
PlayMetaFile
SetTextAlign
GetTextExtentPointA
crypt32
CertCreateCertificateContext
version
GetFileVersionInfoSizeW
kernel32
GetStringTypeW
LCMapStringW
MultiByteToWideChar
LCMapStringA
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
LeaveCriticalSection
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsGetValue
DeleteCriticalSection
GetFileType
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
GetLocaleInfoA
HeapSize
GetSystemTimeAsFileTime
GetEnvironmentStrings
ExitProcess
Sleep
CloseHandle
GetFileTime
GetNamedPipeHandleStateW
DecodeSystemPointer
GetModuleFileNameW
SetLastError
QueryMemoryResourceNotification
CreateTimerQueue
GlobalUnWire
SetHandleCount
SetHandleInformation
MapUserPhysicalPages
GetPriorityClass
TlsSetValue
GetNumaAvailableMemoryNode
SetFilePointerEx
OpenProcess
MulDiv
GetProcessHandleCount
FindVolumeClose
GlobalWire
DeleteAtom
SetCommBreak
ReplaceFileA
CreateNamedPipeW
GetNamedPipeInfo
SetCommMask
GetCommModemStatus
HeapAlloc
ConvertFiberToThread
SetInformationJobObject
FindNextChangeNotification
DisableThreadLibraryCalls
PostQueuedCompletionStatus
GetProcessHeap
GetStringTypeA
GetVersion
CompareStringW
FatalAppExitA
lstrlenW
ReleaseMutex
TlsAlloc
GetTimeFormatA
GetLocaleInfoW
HeapFree
EnterCriticalSection
TryEnterCriticalSection
SetEnvironmentVariableA
CreateRemoteThread
lstrcpyA
OutputDebugStringA
EndUpdateResourceW
LocalReAlloc
CreateEventW
GetCommandLineW
ReadProcessMemory
GetTempPathA
FreeResource
GetCommandLineA
GetStartupInfoA
GetProcAddress
GetModuleHandleA
SetUnhandledExceptionFilter
GetModuleHandleW
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ