Static task
static1
Behavioral task
behavioral1
Sample
968e3f4a0f9c5c12f8d9b24e523b4a52c2d36064e393af8023fee294abfc680b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
968e3f4a0f9c5c12f8d9b24e523b4a52c2d36064e393af8023fee294abfc680b.exe
Resource
win10v2004-20220812-en
General
-
Target
968e3f4a0f9c5c12f8d9b24e523b4a52c2d36064e393af8023fee294abfc680b
-
Size
283KB
-
MD5
e7db84cb1239630e19c3a25417d9032d
-
SHA1
3006fb82520fbf798f1f4c32aeca70b5b6bdb074
-
SHA256
968e3f4a0f9c5c12f8d9b24e523b4a52c2d36064e393af8023fee294abfc680b
-
SHA512
6973ba83cab22ca85b4f597fc661c61ceebfd5f14e54e801e3b3e58cff776ea40b5e44453fc77c287cc445836d4035892b3822836f5495ec1b5ee5523c1e0b8c
-
SSDEEP
6144:wjPTHZiFWIAl8Off93wwi/CqWQbc0SsQLH5Ads:wjLHZic8OGCq3bc0SsPds
Malware Config
Signatures
Files
-
968e3f4a0f9c5c12f8d9b24e523b4a52c2d36064e393af8023fee294abfc680b.exe windows x86
1d9239614bba522919217354a50ac3d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
ExitProcess
VirtualAlloc
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
WriteFile
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
GetProcAddress
HeapFree
GetLastError
GetTickCount
ReadFile
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
user32
DefWindowProcA
GetMessageA
TranslateMessage
PeekMessageA
SetCursorPos
ShowCursor
GetCursorPos
GetDC
UpdateWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
gdi32
SetTextColor
GetStockObject
TextOutA
SetBkMode
ddraw
DirectDrawCreateEx
dsound
ord1
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE