Static task
static1
Behavioral task
behavioral1
Sample
2d08e0c0f46bbaf7b792851e0f6265aecdc66fcb37e619c055de169b669b2110.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2d08e0c0f46bbaf7b792851e0f6265aecdc66fcb37e619c055de169b669b2110.exe
Resource
win10v2004-20220901-en
General
-
Target
2d08e0c0f46bbaf7b792851e0f6265aecdc66fcb37e619c055de169b669b2110
-
Size
212KB
-
MD5
cc8e369bddf27b13184fa0e4a5ed1d54
-
SHA1
c27d4612414461dfd5cbff852c128956ec0eb383
-
SHA256
2d08e0c0f46bbaf7b792851e0f6265aecdc66fcb37e619c055de169b669b2110
-
SHA512
8562e6eca175ff348340302eb198e91077a345c868bedde7bcc6a5fff180878db76be008fb5aa17572db938be99d6467c2cf7a29f095b34b81431dcf6c6c6828
-
SSDEEP
6144:eLOfykIWg/I+Omd6n1ENGQNGmt7pym4fmWrz6:WG9xtOj6z6
Malware Config
Signatures
Files
-
2d08e0c0f46bbaf7b792851e0f6265aecdc66fcb37e619c055de169b669b2110.exe windows x86
b3ad2e304cce6977b6fd00c2c5019210
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMonitorInfoA
GetKeyboardState
RemoveMenu
GetKeyboardLayout
LoadStringW
CheckDlgButton
DialogBoxParamW
VkKeyScanA
ValidateRgn
GetComboBoxInfo
GetMouseMovePointsEx
ExcludeUpdateRgn
GetKeyboardType
GetCursorPos
IsWindow
EnumClipboardFormats
GetGuiResources
CreateAcceleratorTableW
InvalidateRect
OpenClipboard
GetAltTabInfoA
GetMenuState
WindowFromDC
IsCharAlphaW
DrawAnimatedRects
GetMessageTime
GetWindowContextHelpId
GetCursor
MonitorFromPoint
ScrollDC
GetCapture
IsCharAlphaA
ReplyMessage
DefFrameProcW
GetTopWindow
BeginDeferWindowPos
GetScrollPos
NotifyWinEvent
GetGUIThreadInfo
ScrollWindow
GetKeyState
GetAncestor
IsChild
KillTimer
GetMenuDefaultItem
EndDeferWindowPos
GetClipboardViewer
GetThreadDesktop
ScrollWindowEx
GetScrollBarInfo
GetLastActivePopup
advapi32
GetSecurityDescriptorLength
RegCreateKeyW
GetKernelObjectSecurity
gdi32
GetTextMetricsA
EnumFontFamiliesExA
crypt32
CryptMsgOpenToDecode
version
VerQueryValueA
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
TerminateProcess
UnhandledExceptionFilter
GetNumaNodeProcessorMask
SetHandleCount
GetEnvironmentStringsW
FindFirstFileExW
GetThreadPriority
ResetWriteWatch
FindNextChangeNotification
LockResource
GetFileAttributesExW
LocalShrink
CreateIoCompletionPort
MapUserPhysicalPagesScatter
GetModuleFileNameW
CreateMemoryResourceNotification
TlsSetValue
GetStdHandle
GetThreadContext
QueryMemoryResourceNotification
PurgeComm
EscapeCommFunction
RequestWakeupLatency
HeapAlloc
PrepareTape
GetProcessHeap
SetSystemTimeAdjustment
EncodePointer
GetFileSize
GetNumaAvailableMemoryNode
ReleaseSemaphore
GetVersion
SetEndOfFile
SetDllDirectoryA
IsDBCSLeadByte
GetLocalTime
GetSystemTimeAsFileTime
HeapDestroy
GetCommandLineW
FileTimeToLocalFileTime
FindResourceExW
GetUserDefaultLCID
SetFileAttributesA
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ