Static task
static1
Behavioral task
behavioral1
Sample
70fbfad8aaed974b96378829704dfe67f6b25cfdd512837f8a2bc3762c1b7792.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
70fbfad8aaed974b96378829704dfe67f6b25cfdd512837f8a2bc3762c1b7792.exe
Resource
win10v2004-20221111-en
General
-
Target
70fbfad8aaed974b96378829704dfe67f6b25cfdd512837f8a2bc3762c1b7792
-
Size
583KB
-
MD5
4eb9ea53db97af4cec5d79c12d939ed4
-
SHA1
0e1a3bc8bece94fc1f48637d4399affa1843db09
-
SHA256
70fbfad8aaed974b96378829704dfe67f6b25cfdd512837f8a2bc3762c1b7792
-
SHA512
ec1b46db71f2b67e4500d66ce592fd302cc3e285293570d4e17aa903d933f6ce15e3f1949da82675fc568d64bdd498190aa695c3edc871746d7bdf429bc64048
-
SSDEEP
12288:2lARVtmmKjszoMuzRkH0wkjmy142CBc7RcghVrDai38PxYyEpi:2IZksFtnvt2Cm1cMNOXq
Malware Config
Signatures
Files
-
70fbfad8aaed974b96378829704dfe67f6b25cfdd512837f8a2bc3762c1b7792.exe windows x86
228bb536ed0e0650a3834ff43cbef0ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetModuleHandleW
GetACP
FindFirstFileA
ReadFile
SetFilePointer
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
lstrlenW
GetEnvironmentStringsW
GlobalFree
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
TlsSetValue
GetFileType
CreateEventA
GetTimeZoneInformation
ExpandEnvironmentStringsA
DuplicateHandle
FindNextFileA
CompareStringA
FindNextFileW
GetProcAddress
DeleteFileW
SetEvent
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
TerminateProcess
GetSystemDirectoryA
SetUnhandledExceptionFilter
FindResourceW
GetModuleHandleA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetEnvironmentVariableA
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
LocalFree
GetExitCodeProcess
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
FreeEnvironmentStringsA
HeapDestroy
WaitForSingleObject
GetFileAttributesA
GetConsoleOutputCP
GetStdHandle
GetCommandLineA
GetVersion
FreeEnvironmentStringsW
GetEnvironmentStrings
VirtualFree
RtlUnwind
LCMapStringA
InterlockedDecrement
Sleep
VirtualAlloc
CreateThread
ResetEvent
ole32
CoTaskMemFree
CoInitialize
CoCreateInstance
user32
CallWindowProcA
DrawTextA
InvalidateRect
GetSysColor
MessageBoxA
EndDialog
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ScreenToClient
GetDlgItem
SetCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
SetFocus
FillRect
SetTimer
RegisterClassA
IsIconic
LoadStringA
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
UpdateWindow
DestroyWindow
SendMessageA
ReleaseDC
GetDC
SetWindowPos
PostQuitMessage
gdi32
GetStockObject
GetDeviceCaps
SelectObject
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 557KB - Virtual size: 557KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ