Static task
static1
Behavioral task
behavioral1
Sample
7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42.exe
Resource
win10v2004-20221111-en
General
-
Target
7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42
-
Size
157KB
-
MD5
458537a045a10e5c4babac225d10322e
-
SHA1
3e3b6b1f0f4a6dfa1e5edda949b295414d30a0a3
-
SHA256
7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42
-
SHA512
0464f24a4333d6496f550f96a42b980758f7bb9f5fab20651bef8fe3bdf498b3f309ce6c84a617967c4150242f9106d62745c04c2af2b73c4bff7b774992c710
-
SSDEEP
3072:r8lIPZKuXSCiZ5NhUfp9bRNQjrVURFTVZn3QGsfk7oinAowssD1Lgx4aLkv6wfui:r8+3X4KR9NqjpU/33WkkGdsxgSf/
Malware Config
Signatures
Files
-
7f2f2172be6c90e87c37a84f7cf3ea44f8e1d543fe69e8fdfb6349fab5ee6e42.exe windows x86
9dd80e20aaafed4fe91fa284d0f6ce5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
ReadProcessMemory
GetLastError
VerLanguageNameA
GetComputerNameW
SetEnvironmentVariableA
GetStartupInfoA
lstrcpyA
FindFirstFileA
GetProcessHeap
GetFileType
lstrcmpiA
lstrcatA
VirtualAlloc
GetModuleHandleA
user32
InvalidateRect
TrackPopupMenuEx
LoadIconA
MessageBoxA
FindWindowA
DeleteMenu
RegisterClassExA
IsDialogMessageA
DestroyWindow
TranslateAcceleratorA
DeferWindowPos
SendMessageA
DrawIconEx
GetDesktopWindow
EnableMenuItem
IntersectRect
ReleaseCapture
IsZoomed
CopyRect
GetWindowThreadProcessId
SetUserObjectSecurity
gdi32
DeleteObject
SetBkColor
SelectClipRgn
CreateRectRgn
SetTextColor
StartDocA
Rectangle
SetMapMode
BitBlt
GetBkMode
RectInRegion
GetObjectA
msvcrt
_atoi64
__p__commode
_scalb
_findnext64
_acmdln
_adj_fdiv_m64
_ultow
__p__fmode
rewind
_XcptFilter
_strtime
_adj_fpatan
_rotl
__setusermatherr
memcpy
_except_handler3
exit
__set_app_type
_wexeclp
ungetc
_strerror
_controlfp
_adjust_fdiv
iswascii
_exit
_initterm
clock
__getmainargs
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ