Static task
static1
Behavioral task
behavioral1
Sample
224c2cfcbeaa3500dcd6bc56863998954ad86e2a465ae03727925d65f172d36c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
224c2cfcbeaa3500dcd6bc56863998954ad86e2a465ae03727925d65f172d36c.exe
Resource
win10v2004-20221111-en
General
-
Target
224c2cfcbeaa3500dcd6bc56863998954ad86e2a465ae03727925d65f172d36c
-
Size
1.7MB
-
MD5
2389f8e6150d582831bc4f689dfdffb0
-
SHA1
69bddd958d93fa2ff666b3ce3249339380ae3ce7
-
SHA256
224c2cfcbeaa3500dcd6bc56863998954ad86e2a465ae03727925d65f172d36c
-
SHA512
9f5db9b5a0bf2bb066ac018cfa3a6066f3dbebf28dde46c17456c4b1a70c4568753e65ee501c0c3542d8bb5cb8926d36354b10a7f42f0b9dbda6a69e3755da83
-
SSDEEP
24576:lVSL6ZcViR7SVLppwidNf0S3ei3832FAd60IB7wgU8PtCG8Slw4HvVWv:b92w0VLppwidOS3eJ2w6t1H9feU9W
Malware Config
Signatures
Files
-
224c2cfcbeaa3500dcd6bc56863998954ad86e2a465ae03727925d65f172d36c.exe windows x86
887a9ae186633df0062855d32b795b28
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
WriteFileEx
OpenFile
SetMailslotInfo
LocalFileTimeToFileTime
VirtualAlloc
GetCurrentDirectoryA
GetConsoleKeyboardLayoutNameA
Module32NextW
GetConsoleInputExeNameA
iasrad
DllCanUnloadNow
?shutdown@VSAFilter@@QAEJXZ
DllRegisterServer
DllGetClassObject
DllUnregisterServer
?radiusToIAS@VSAFilter@@QBEJPAUIAttributesRaw@@@Z
?initialize@VSAFilter@@QAEJXZ
d3d8
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader
DebugSetMute
dmocx
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
gdi32
CreatePen
GetClipBox
SetTextCharacterExtra
GdiPlayEMF
GetRgnBox
TextOutW
SetWindowOrgEx
DeleteObject
CreateFontIndirectA
CreatePenIndirect
ExtSelectClipRgn
GetObjectA
CreateSolidBrush
SelectObject
GetStockObject
EqualRgn
GetDCOrgEx
ExtCreatePen
CreateBrushIndirect
CreatePalette
user32
IsChild
LoadMenuW
LoadAcceleratorsW
GetWindowTextW
GetDesktopWindow
GetSysColor
GetSysColorBrush
LoadCursorA
GetSystemMetrics
FindWindowA
LoadAcceleratorsA
GetMenu
LoadBitmapW
GetWindowTextA
LoadMenuA
GetProcessDefaultLayout
GetClientRect
GetWindowRect
FindWindowW
LoadBitmapA
GetDC
LoadIconA
GetForegroundWindow
comctl32
CreateStatusWindowW
ImageList_SetFilter
ImageList_Write
InitCommonControls
ImageList_Create
PropertySheet
ImageList_Replace
ImageList_Destroy
ImageList_Read
ImageList_AddMasked
FlatSB_SetScrollRange
InitCommonControlsEx
InitializeFlatSB
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ