Static task
static1
Behavioral task
behavioral1
Sample
23cf4f0ba41cfb361dd2d23c47094dae902457d1ab8610fe7ef5ac540f6f55c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23cf4f0ba41cfb361dd2d23c47094dae902457d1ab8610fe7ef5ac540f6f55c3.exe
Resource
win10v2004-20221111-en
General
-
Target
23cf4f0ba41cfb361dd2d23c47094dae902457d1ab8610fe7ef5ac540f6f55c3
-
Size
54KB
-
MD5
b0e008e072321f573fd705886e1aa50f
-
SHA1
f006c8c4394a8f4afa8445a7dc82d2194455b04d
-
SHA256
23cf4f0ba41cfb361dd2d23c47094dae902457d1ab8610fe7ef5ac540f6f55c3
-
SHA512
34dc9392a79e758a766000dd3bdd42e0509f93c2a80b99ee84d5d8cb404fa66753bccaf168a3b412b19854f8799adea7cad4cc6370892c43477480ac2059c3a9
-
SSDEEP
1536:LqFUCWdBxVgKb2nsAX1MXWLb+QlzCicqLyeNI:oUC+Z2sAFMXC3zrcqWM
Malware Config
Signatures
Files
-
23cf4f0ba41cfb361dd2d23c47094dae902457d1ab8610fe7ef5ac540f6f55c3.exe windows x86
ae66daadb7a25a5a21d507d5d39fd925
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
GradientFill
comdlg32
ChooseColorA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
user32
CreateWindowExW
CreateWindowExA
keybd_event
WindowFromPoint
WindowFromDC
WinHelpA
WaitMessage
VkKeyScanW
ValidateRect
UpdateLayeredWindow
UpdateWindow
UnregisterHotKey
UnregisterDeviceNotification
UnregisterClassW
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenuEx
TrackPopupMenu
TrackMouseEvent
ToUnicode
ToAscii
SystemParametersInfoW
SystemParametersInfoA
SubtractRect
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
msasn1
ASN1BERDecBitString
ASN1BERDecBitString2
ASN1BERDecBool
ASN1BERDecChar16String
ASN1BERDecChar32String
glu32
gluBeginCurve
gluBeginPolygon
gluBeginSurface
msdart
??0CCritSec@@QAE@XZ
mapi32
BMAPIAddress
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetTimeZoneInformation
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
DeleteFileA
TerminateProcess
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
GetDateFormatA
GetTimeFormatA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetLastError
GetLocalTime
GetEnvironmentVariableA
SetCommBreak
_lopen
GetCommState
SetCommState
SetCommTimeouts
ClearCommBreak
CreatePipe
SetHandleInformation
GetCurrentThreadId
OpenProcess
LocalAlloc
LocalFree
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentThread
GetThreadTimes
GetCurrentProcess
GetProcessTimes
GetSystemTime
GetSystemTimeAdjustment
GetSystemDirectoryA
WriteFile
CreateEventA
_lread
WaitForSingleObject
GetOverlappedResult
SetEvent
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 470B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE