Static task
static1
Behavioral task
behavioral1
Sample
436d1b83bd650bb2e8884f6818f35533cd6afcb68eace5cfe6da30fa56d3e103.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
436d1b83bd650bb2e8884f6818f35533cd6afcb68eace5cfe6da30fa56d3e103.exe
Resource
win10v2004-20221111-en
General
-
Target
436d1b83bd650bb2e8884f6818f35533cd6afcb68eace5cfe6da30fa56d3e103
-
Size
211KB
-
MD5
2f6bf2c5e99e5962e231aee03779c0d0
-
SHA1
0c0c72a8399aa9899660be9c99af5a66e24d6baf
-
SHA256
436d1b83bd650bb2e8884f6818f35533cd6afcb68eace5cfe6da30fa56d3e103
-
SHA512
2dd32a823efda8554bf274f53db3555845d79f0b6c879173637b04d70d46857661f69b127627c6b168e915a05cd20686cf2beec98fa5824be55906edce21bb6a
-
SSDEEP
3072:ENN1qo/cSV1mOz3rTizcliXjrCOk2PgqfcAtYEjrrrJUMb3LEIHkelkOPJADF:ENNEoUClzY02PPgqfwUrrJ9b/Hkelk55
Malware Config
Signatures
Files
-
436d1b83bd650bb2e8884f6818f35533cd6afcb68eace5cfe6da30fa56d3e103.exe windows x86
28957af44816b9cb811034464c45a151
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushInstructionCache
GetEnvironmentVariableA
CreateJobObjectW
FindFirstFileExA
GetTempPathA
_lread
WriteProfileSectionA
EscapeCommFunction
DisconnectNamedPipe
GetLongPathNameA
RequestWakeupLatency
DeleteVolumeMountPointW
BackupWrite
WriteFileGather
EnumResourceNamesA
MapViewOfFileEx
GlobalMemoryStatus
EnumSystemLanguageGroupsA
InterlockedCompareExchange
ResumeThread
CreateWaitableTimerW
SetMailslotInfo
RtlZeroMemory
LCMapStringW
TransactNamedPipe
LocalCompact
GlobalWire
CreateMutexW
GlobalLock
GetStringTypeW
user32
GetWindowPlacement
GetListBoxInfo
SetActiveWindow
SetCursor
SubtractRect
GetGuiResources
UnregisterHotKey
SetScrollPos
GetSystemMetrics
CloseClipboard
DdeGetData
DestroyCursor
LoadStringW
DefWindowProcW
IsCharAlphaNumericW
InvalidateRgn
PostQuitMessage
IsDlgButtonChecked
MoveWindow
GetWindow
EnumThreadWindows
SetMessageQueue
IsChild
GetTopWindow
GetDlgItemInt
DialogBoxParamA
SendDlgItemMessageA
CreateCursor
GetClassLongW
IMPQueryIMEW
MsgWaitForMultipleObjectsEx
CallWindowProcW
CharToOemW
MonitorFromRect
ReplyMessage
IsCharLowerA
DdeQueryNextServer
GetWindowTextW
SetMenuContextHelpId
SetDlgItemTextW
DrawTextExW
DrawEdge
EnumDisplayDevicesA
GetWindowModuleFileNameA
TranslateAcceleratorA
ChildWindowFromPoint
TrackMouseEvent
GetAltTabInfoA
GetCaretPos
UnloadKeyboardLayout
SetMenuItemInfoA
GetInputDesktop
CopyImage
DdeEnableCallback
GetDoubleClickTime
CharPrevW
UnpackDDElParam
EnableWindow
HideCaret
RedrawWindow
NotifyWinEvent
DdeNameService
SetMessageExtraInfo
UpdateLayeredWindow
LoadKeyboardLayoutW
GetClassLongA
WINNLSGetIMEHotkey
GetClassWord
SetWindowPlacement
WindowFromPoint
RegisterWindowMessageA
GetMenuItemRect
MapDialogRect
GetCursorInfo
GetMessageTime
OemToCharW
GetWindowLongW
DispatchMessageW
WaitMessage
ChangeClipboardChain
DdePostAdvise
DestroyAcceleratorTable
ValidateRgn
SetCaretBlinkTime
CascadeWindows
EnumPropsA
DdeInitializeA
ToUnicodeEx
ToUnicode
SetThreadDesktop
GetKeyNameTextW
IsWindowUnicode
RegisterClipboardFormatA
GetScrollRange
SetScrollInfo
CharLowerBuffW
MonitorFromWindow
DrawStateW
OpenInputDesktop
IsCharLowerW
GetWindowWord
GetNextDlgTabItem
MapVirtualKeyExA
CheckRadioButton
TabbedTextOutA
ShowCaret
LoadKeyboardLayoutA
shell32
SHGetDiskFreeSpaceA
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE