Static task
static1
Behavioral task
behavioral1
Sample
1f3ccd6ab7d68d118f1c48e5a47c60bb5c2992e7c55134ff6884f753a242ffd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f3ccd6ab7d68d118f1c48e5a47c60bb5c2992e7c55134ff6884f753a242ffd9.exe
Resource
win10v2004-20220812-en
General
-
Target
1f3ccd6ab7d68d118f1c48e5a47c60bb5c2992e7c55134ff6884f753a242ffd9
-
Size
190KB
-
MD5
52463a61f3abda3a994cdc756b44e75b
-
SHA1
30f5d960846f7ba046be7cd7b1e90b82e5abef93
-
SHA256
1f3ccd6ab7d68d118f1c48e5a47c60bb5c2992e7c55134ff6884f753a242ffd9
-
SHA512
5c914cfcc4a3d67a5f7ffe5d619c869d7e806dd44f47ae198e9b747ea9c2734aa30eb331f52e1e340ba472539c3a927d020f3303bf3a6702a42b9119f17a1cfe
-
SSDEEP
3072:FuDjoHIjdyFLAJ8gMrJIpI4zamYmgnKERJvzeCSnbC:FuDUojd4yMrOpIi+FKERBSbC
Malware Config
Signatures
Files
-
1f3ccd6ab7d68d118f1c48e5a47c60bb5c2992e7c55134ff6884f753a242ffd9.exe windows x86
a0deaf2e8eac2a1d50510b220e14fe46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
FormatMessageA
IsValidCodePage
GetStartupInfoA
GetComputerNameW
LoadResource
lstrlenA
GetSystemInfo
ReadProcessMemory
FreeEnvironmentStringsW
GetCurrentProcessId
LeaveCriticalSection
Module32Next
GetConsoleCP
FileTimeToSystemTime
GetEnvironmentStrings
Module32First
PulseEvent
WriteConsoleA
WaitForMultipleObjects
IsDebuggerPresent
GetSystemTimeAsFileTime
GetFileAttributesA
MultiByteToWideChar
GetCommandLineW
TerminateThread
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
ResetEvent
MapViewOfFile
RtlUnwind
HeapAlloc
QueryPerformanceCounter
GetCPInfo
DeleteCriticalSection
GetEnvironmentStringsW
lstrcatA
VirtualAlloc
IsBadReadPtr
SearchPathA
TlsSetValue
RaiseException
CreateFileA
GetDriveTypeA
WriteFile
GetCommandLineA
DeviceIoControl
InterlockedIncrement
DeleteFileA
GlobalLock
LCMapStringA
Sleep
UnmapViewOfFile
GetVersion
CreateProcessA
QueryPerformanceFrequency
user32
GetUpdateRgn
GetKeyState
LoadCursorA
ShowWindowAsync
DeleteMenu
CheckRadioButton
ModifyMenuA
ReleaseCapture
DefDlgProcA
RegisterWindowMessageA
FindWindowExA
FillRect
DrawFrameControl
GetDlgCtrlID
CloseClipboard
GetWindowLongA
SetClassLongA
LoadImageA
DrawIconEx
GetWindowTextA
TrackPopupMenu
FrameRect
SystemParametersInfoA
WindowFromPoint
SetCapture
GetClassLongA
EnableMenuItem
UnionRect
GetSubMenu
InvalidateRect
GetMenuItemCount
GetWindow
ScreenToClient
SendMessageA
DialogBoxParamA
ScrollWindowEx
ChildWindowFromPoint
KillTimer
EmptyClipboard
TranslateAcceleratorA
UpdateWindow
DrawTextA
GetUserObjectSecurity
SetWindowTextA
GetWindowPlacement
SetScrollInfo
LoadAcceleratorsA
DefMDIChildProcA
GetSysColorBrush
GetWindowDC
EnumChildWindows
EndDialog
CreateMenu
AppendMenuA
IsWindowVisible
TrackPopupMenuEx
GetScrollInfo
SetWindowPlacement
SetUserObjectSecurity
GetCapture
wsprintfA
GetDlgItem
GetFocus
GetMenu
PostQuitMessage
GetDlgItemTextA
FindWindowA
MapWindowPoints
CheckDlgButton
MsgWaitForMultipleObjects
SendMessageTimeoutA
InflateRect
SetClipboardData
DispatchMessageA
DrawMenuBar
PeekMessageA
msvcrt
_ctime64
iswdigit
_futime64
_ismbcl0
_wspawnl
_mbsnbcpy
memcmp
_sopen
_strrev
__setusermatherr
strtol
_exit
_fpreset
wcspbrk
sinh
wcstombs
modf
setlocale
_mbscoll
_waccess
setvbuf
exit
__getmainargs
_setjmp3
_wmktemp
_cprintf
_mbsbtype
pow
fputwc
_except_handler3
_flsbuf
frexp
_logb
_aligned_realloc
_fpclass
_setmaxstdio
_cscanf
_XcptFilter
swprintf
calloc
_chdrive
_ltow
system
_chkesp
_controlfp
_wenviron
tmpfile
_ismbcspace
_inpd
_acmdln
_mbcasemap
__set_app_type
_tolower
wcstol
_nextafter
_outp
_wexecl
_aligned_malloc
fmod
_ismbcsymbol
_seh_longjmp_unwind
_fcloseall
_wrename
_initterm
isleadbyte
_findnext64
_fstati64
__p__commode
_wfullpath
_pctype
_ismbbprint
wcscat
isdigit
_lrotl
_seterrormode
_fileno
labs
_putw
_adjust_fdiv
_wmkdir
_umask
_mbctype
_wstati64
_aligned_free
vfwprintf
_lseek
memchr
_ismbclower
memcpy
_strnset
__p__fmode
_scalb
_wopen
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ