Static task
static1
Behavioral task
behavioral1
Sample
f17c352b65eb0aa1995927fb0e070bfa9f1813e35a1fec1540e3a8f33905a70d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f17c352b65eb0aa1995927fb0e070bfa9f1813e35a1fec1540e3a8f33905a70d.exe
Resource
win10v2004-20220901-en
General
-
Target
f17c352b65eb0aa1995927fb0e070bfa9f1813e35a1fec1540e3a8f33905a70d
-
Size
124KB
-
MD5
559ecca82321a43bc25c4f4b1f82c495
-
SHA1
0219e25a6736021c97dd05e58249d1f94fc9dde4
-
SHA256
f17c352b65eb0aa1995927fb0e070bfa9f1813e35a1fec1540e3a8f33905a70d
-
SHA512
4ae859756f5284651184f69b9e33f75ad76e2a3ae38f0e1e7948a0781ef0ea1d5bbb931c3b01b6e5e2f8bc61b764542f8baf78207e1b4e427f2f93f3e251dec6
-
SSDEEP
3072:I5wJpcqTo14L9+eCvfJ5wXIo1GbuMLauegULS+ZTup:GwjW++eKEXI1kuegExI
Malware Config
Signatures
Files
-
f17c352b65eb0aa1995927fb0e070bfa9f1813e35a1fec1540e3a8f33905a70d.exe windows x86
aceb59d6ea0573309ee85de96416f9cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
EnumResourceTypesA
ClearCommBreak
GlobalAlloc
UnlockFile
ReadFile
HeapCreate
SearchPathA
user32
RegisterClassA
GetKeyboardType
PostMessageW
TranslateMessage
DlgDirSelectComboBoxExA
GetDlgItemInt
GetKeyboardLayoutList
WindowFromPoint
SetCursor
MonitorFromPoint
GetMenuItemRect
CharNextW
SetScrollInfo
CreateWindowExA
GetSystemMetrics
LookupIconIdFromDirectory
AttachThreadInput
GetKeyState
IsCharAlphaA
SendNotifyMessageW
ArrangeIconicWindows
GetActiveWindow
GrayStringW
IsCharAlphaW
gdi32
SetWindowExtEx
CreateFontIndirectA
GetTextExtentExPointW
TextOutW
CreateRectRgnIndirect
CreateFontIndirectW
DPtoLP
SaveDC
SetDIBits
GetStockObject
atl
AtlAxCreateControl
AtlAxCreateControlEx
shlwapi
PathFileExistsW
Sections
.dedrde Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vggh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqew Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ereffv Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdgdfs Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ