Static task
static1
Behavioral task
behavioral1
Sample
c36dbfbf1c13ef0727762e521e4dc92c69dae1b7dc09db69233a0637f9f9d661.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c36dbfbf1c13ef0727762e521e4dc92c69dae1b7dc09db69233a0637f9f9d661.exe
Resource
win10v2004-20221111-en
General
-
Target
c36dbfbf1c13ef0727762e521e4dc92c69dae1b7dc09db69233a0637f9f9d661
-
Size
714KB
-
MD5
08c345add0a84231466f2dd56ac676f5
-
SHA1
fd8fe889fdcd07ece4665ea2b32748828a0de68d
-
SHA256
c36dbfbf1c13ef0727762e521e4dc92c69dae1b7dc09db69233a0637f9f9d661
-
SHA512
e744f3c9bba52b27e69e81c821ef155c1afc93c64808a1706f27b800c6e1943dbafc27fe0ee356e08723bf040f403477a836a975dfceede56a5c7ab5882e75db
-
SSDEEP
12288:GY+Sj5UZEYPMyNQ29JY8J3zavbF8eNzOWNkzxysbmqUL7QVGiVxJsh:GYJyZgySICR8eNzOqBsbmVLc
Malware Config
Signatures
Files
-
c36dbfbf1c13ef0727762e521e4dc92c69dae1b7dc09db69233a0637f9f9d661.exe windows x86
545722142e23f12aac3a928bb4620105
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
MultiByteToWideChar
HeapAlloc
GetStartupInfoW
ConnectNamedPipe
SetStdHandle
SetUnhandledExceptionFilter
WritePrivateProfileStringA
comctl32
InitCommonControlsEx
iphlpapi
UnenableRouter
InternalCreateIpForwardEntry
user32
SendMessageW
InvalidateRect
PtInRect
GetClientRect
GetWindowPlacement
CheckRadioButton
GetMenu
MessageBoxW
LoadAcceleratorsW
UpdateWindow
IsZoomed
LoadStringA
DispatchMessageW
LoadCursorW
CreateWindowExW
EndPaint
ReleaseDC
SetRect
DefWindowProcW
PeekMessageW
IntersectRect
GetDC
GetDlgItem
LoadIconW
FillRect
PostMessageW
GetSubMenu
GetDesktopWindow
MoveWindow
UnionRect
BeginPaint
DrawTextW
OffsetRect
DestroyWindow
IsIconic
EnableMenuItem
IsDlgButtonChecked
WaitMessage
SetDlgItemTextW
LoadBitmapW
RegisterClassW
GetDlgItemTextW
EndDialog
InvertRect
DrawMenuBar
DialogBoxParamW
FrameRect
ReleaseCapture
ShowWindow
MessageBoxA
SetCapture
GetMessageW
CheckDlgButton
WinHelpW
TranslateAcceleratorW
GetWindowRect
wsprintfW
GetSystemMetrics
GetForegroundWindow
Sections
.text Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 259KB - Virtual size: 670KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ