Static task
static1
Behavioral task
behavioral1
Sample
2492da7976810f38a8940ec33bec474af040348255614abb495bdc6dc7e45638.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2492da7976810f38a8940ec33bec474af040348255614abb495bdc6dc7e45638.exe
Resource
win10v2004-20220901-en
General
-
Target
2492da7976810f38a8940ec33bec474af040348255614abb495bdc6dc7e45638
-
Size
804KB
-
MD5
35eaa415feb732e32be566bbdeb15b0c
-
SHA1
1fb5ff1a96a8fa3bc1687f497a897f82f3e0449a
-
SHA256
2492da7976810f38a8940ec33bec474af040348255614abb495bdc6dc7e45638
-
SHA512
047dd4f1bfe6102cbf93fe7da6ce790f7954cc81baa608b9cecb61b562acdc31a91fcd44af841e524d2d5c1a1923e39eb30adb6f54a1ac3effdacc5002882bb7
-
SSDEEP
12288:RqRrGNMqKlijOfeAs7prrWdRMoeNVRggEigxw:KrGWqKlijrzRHJCW3
Malware Config
Signatures
Files
-
2492da7976810f38a8940ec33bec474af040348255614abb495bdc6dc7e45638.exe windows x86
8adb979dda67280411e755989fca5c6f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
QueryPerformanceCounter
GetModuleHandleW
HeapFree
MultiByteToWideChar
InterlockedCompareExchange
CreateThread
GetModuleFileNameW
LocalFree
UnhandledExceptionFilter
GetVersionExA
QueryPerformanceCounter
GetLastError
CreateThread
LocalAlloc
CreateThread
GetTickCount
CreateFileW
GetModuleFileNameA
GetVersionExA
QueryPerformanceCounter
HeapAlloc
UnhandledExceptionFilter
LoadLibraryA
GetProcessHeap
HeapDestroy
LocalFree
VirtualAlloc
GetModuleHandleW
lstrlenA
LocalFree
Sleep
VirtualProtect
InterlockedCompareExchange
GetTickCount
CreateFileW
DeleteCriticalSection
GetTickCount
EnterCriticalSection
LocalFree
VirtualProtect
InterlockedIncrement
LeaveCriticalSection
CloseHandle
DeleteCriticalSection
lstrlenA
VirtualProtect
HeapDestroy
lstrlenA
GetCurrentProcessId
GetCurrentProcess
MultiByteToWideChar
GetSystemTimeAsFileTime
lstrcmpiW
InterlockedDecrement
LocalAlloc
ReadFile
DisableThreadLibraryCalls
GetModuleFileNameA
CreateEventW
FreeLibrary
DisableThreadLibraryCalls
Sleep
LoadLibraryW
LeaveCriticalSection
LoadLibraryA
CreateFileW
CreateFileW
FreeLibrary
InterlockedExchange
LocalAlloc
VirtualProtect
GetSystemTimeAsFileTime
LoadLibraryA
Sleep
lstrcmpiW
GetModuleFileNameW
lstrlenA
GetModuleFileNameW
HeapFree
GetModuleFileNameA
lstrlenA
FreeLibrary
Sleep
LocalFree
user32
PostQuitMessage
SetForegroundWindow
KillTimer
GetParent
PeekMessageW
SetWindowPos
DestroyWindow
SendDlgItemMessageW
GetSysColor
CharNextW
SetWindowTextW
TranslateMessage
GetClientRect
PostMessageW
CharNextW
CreateWindowExW
PostMessageW
LoadStringW
MessageBoxW
SetWindowLongW
SetDlgItemTextW
GetWindowRect
PeekMessageW
DialogBoxParamW
GetFocus
DestroyWindow
GetWindowLongW
SendMessageW
GetSystemMetrics
GetDlgItem
PostQuitMessage
GetSysColor
ReleaseDC
TranslateMessage
GetDC
SetForegroundWindow
LoadCursorW
EndPaint
DestroyWindow
BeginPaint
DestroyWindow
GetFocus
CharNextW
wsprintfA
LoadIconW
DispatchMessageW
LoadCursorW
SetWindowLongW
DialogBoxParamW
EndPaint
SetWindowLongW
IsDlgButtonChecked
DialogBoxParamW
SetForegroundWindow
SetWindowTextW
ReleaseDC
GetDlgItem
PostMessageW
GetFocus
LoadCursorW
IsWindow
GetSystemMetrics
SetWindowTextW
ShowWindow
TranslateMessage
EnableWindow
GetWindowRect
IsDlgButtonChecked
PostQuitMessage
PeekMessageW
IsWindow
MessageBoxW
SetDlgItemTextW
SendMessageW
CreateWindowExW
GetFocus
DialogBoxParamW
IsDlgButtonChecked
GetParent
SendDlgItemMessageW
GetWindowRect
LoadIconW
InvalidateRect
GetWindowRect
CharNextW
Sections
.text Size: 717KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ