Static task
static1
Behavioral task
behavioral1
Sample
2ec6049aa485f69c69a526fcea9ecef1438fb0e536677cf4ce9fd84d94ffc42a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2ec6049aa485f69c69a526fcea9ecef1438fb0e536677cf4ce9fd84d94ffc42a.exe
Resource
win10v2004-20220812-en
General
-
Target
2ec6049aa485f69c69a526fcea9ecef1438fb0e536677cf4ce9fd84d94ffc42a
-
Size
233KB
-
MD5
94613d7eb634472d64149eb42f613fd9
-
SHA1
6369a63dc932e86534c1adeac4d1356c276674fe
-
SHA256
2ec6049aa485f69c69a526fcea9ecef1438fb0e536677cf4ce9fd84d94ffc42a
-
SHA512
f383e8a9f96e16a6174676135f1278186d27ae3234d49ed7538a572edaa51fb774c488658971aa5b8aab69e0c0450a6f9c028fd9a60e7fab5b8543f99a4bf0a8
-
SSDEEP
6144:tOfykIWg/I+Omd6n1ENGQNGmt7pe3hhU8VE9H:tG9xtOS08Kh
Malware Config
Signatures
Files
-
2ec6049aa485f69c69a526fcea9ecef1438fb0e536677cf4ce9fd84d94ffc42a.exe windows x86
5e97d37dddf4ead2e8a3b9d78a38895b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongW
MapDialogRect
FindWindowW
CreateDialogParamW
SetTimer
SetWindowLongW
GetActiveWindow
InflateRect
ReleaseDC
LoadStringW
TrackPopupMenuEx
IsClipboardFormatAvailable
GetListBoxInfo
GetInputState
GetTopWindow
IsCharUpperW
GetPriorityClipboardFormat
MonitorFromWindow
RegisterRawInputDevices
IsMenu
GetLayeredWindowAttributes
WaitForInputIdle
EnableScrollBar
GetKBCodePage
GetScrollPos
GetOpenClipboardWindow
RedrawWindow
CloseWindow
GetSystemMetrics
IsCharLowerA
DrawFocusRect
GetAsyncKeyState
GetUserObjectInformationA
comdlg32
GetOpenFileNameA
shell32
SHBrowseForFolderA
CommandLineToArgvW
ole32
GetRunningObjectTable
advapi32
RegEnumKeyA
CryptAcquireContextA
gdi32
SetBkColor
CreateRectRgnIndirect
SetTextColor
CreateFontIndirectW
DeleteMetaFile
comctl32
ord17
kernel32
GetLocaleInfoA
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
UnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
GetStringTypeA
MultiByteToWideChar
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
GetCurrentProcess
IsDebuggerPresent
SetPriorityClass
TransmitCommChar
DisableThreadLibraryCalls
SetHandleCount
LocalCompact
MapUserPhysicalPages
CreateFileMappingW
IsProcessInJob
GlobalUnfix
DecodeSystemPointer
UnlockFileEx
GetFileTime
CancelWaitableTimer
GetNamedPipeHandleStateA
ResetWriteWatch
GetCommandLineA
GetCommModemStatus
DisconnectNamedPipe
SetProcessShutdownParameters
DeactivateActCtx
HeapAlloc
CreateTapePartition
TlsGetValue
GetNamedPipeInfo
GetProcessHeap
WTSGetActiveConsoleSessionId
RemoveDirectoryA
SetDllDirectoryA
GetTimeFormatA
GetExitCodeThread
WinExec
DebugActiveProcessStop
SetEvent
IsDBCSLeadByte
GlobalLock
LocalUnlock
lstrcmpiA
HeapFree
FreeEnvironmentStringsW
SetEnvironmentVariableW
IsProcessorFeaturePresent
ReleaseMutex
GetFileSize
GetTempFileNameW
GetStartupInfoA
GetModuleHandleW
GetProcAddress
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
SetUnhandledExceptionFilter
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ