Static task
static1
Behavioral task
behavioral1
Sample
2b408c095c899ffe7b6e3fbf5991291380fcff12fb1cb8d9798eb49517585e04.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2b408c095c899ffe7b6e3fbf5991291380fcff12fb1cb8d9798eb49517585e04.exe
Resource
win10v2004-20220812-en
General
-
Target
2b408c095c899ffe7b6e3fbf5991291380fcff12fb1cb8d9798eb49517585e04
-
Size
261KB
-
MD5
4c26ceb2b9c77d312ff3cad1212f586a
-
SHA1
423d148b6a00782f56f1b16f8203a2a4ca625366
-
SHA256
2b408c095c899ffe7b6e3fbf5991291380fcff12fb1cb8d9798eb49517585e04
-
SHA512
02d2fd0b3dad38722c5f7f3cf65a21a6034eab45fe26e6cd5c32dbcc12824cdfaaebeeaf5bdf87d6bbac18a15d3bac62af599ad40d7ac0e233b6c6b0ba783f9c
-
SSDEEP
6144:FAtAQcn/ZNDCLXIukbYTWCwszD8P4gJsQF4MyER:FAtAQIZNDaIOTDv8PtZ4MyER
Malware Config
Signatures
Files
-
2b408c095c899ffe7b6e3fbf5991291380fcff12fb1cb8d9798eb49517585e04.exe windows x86
72d8171125f7d79bd3eeef1031c30638
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
SetConsoleTitleA
CreateDirectoryA
FindFirstFileA
GetLastError
GetModuleHandleA
CloseHandle
ReadFile
IsProcessorFeaturePresent
CreateFileW
Sleep
LCMapStringW
OutputDebugStringW
OutputDebugStringA
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
SetFilePointer
MultiByteToWideChar
WriteConsoleW
GetCommandLineA
GetCurrentProcess
SetStdHandle
RtlUnwind
RaiseException
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
HeapAlloc
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
DecodePointer
GetProcAddress
GetModuleHandleW
ExitProcess
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
FreeEnvironmentStringsW
user32
GetDlgItemTextA
SetDlgItemTextA
RegisterClassA
GetMessageA
GetWindowTextLengthA
SendMessageA
GetDC
IsDialogMessageA
TranslateMessage
GetDlgItem
GetMenuStringA
CheckDlgButton
LoadAcceleratorsA
DispatchMessageA
LoadImageA
FindWindowA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ws2_32
gethostname
comctl32
InitCommonControlsEx
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 433KB - Virtual size: 441KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ