Static task
static1
Behavioral task
behavioral1
Sample
144e8d77210b0acac533ffd755350924e2f0a1736ebe1b09d6eaa42a6f8f4858.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
144e8d77210b0acac533ffd755350924e2f0a1736ebe1b09d6eaa42a6f8f4858.exe
Resource
win10v2004-20221111-en
General
-
Target
144e8d77210b0acac533ffd755350924e2f0a1736ebe1b09d6eaa42a6f8f4858
-
Size
319KB
-
MD5
3ca1908eb82fa50f0ea2313b20a10c99
-
SHA1
58d090578af629829fc7ce925debda38b57ec91d
-
SHA256
144e8d77210b0acac533ffd755350924e2f0a1736ebe1b09d6eaa42a6f8f4858
-
SHA512
051cf33b6eafed46dc03458a8a648ecf00b7d05a7cf2ee1666f1ad93c8bc38a6ad6ce4c1f61aec829ad24e1729651391cd32f64bb6e9d75b1cd87859c1099d59
-
SSDEEP
6144:HatBdgIhFV4hZySKeAf3KOc8BOlWVKOKAbtLmfAxL5Tov+fjehvT7XPqNXyiDV:HsdJFV4h+eETBbKnc02L5TovksvTsVD
Malware Config
Signatures
Files
-
144e8d77210b0acac533ffd755350924e2f0a1736ebe1b09d6eaa42a6f8f4858.exe windows x86
ccaa2042e7ec4b950ff7073208f5bf8e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetFileSize
GetACP
GlobalReAlloc
FileTimeToLocalFileTime
HeapSize
GetProcessHeaps
CreateDirectoryW
lstrcatW
lstrlenA
SetUnhandledExceptionFilter
lstrlenW
FindClose
QueryPerformanceCounter
GetNumberFormatW
FileTimeToSystemTime
LoadLibraryW
MultiByteToWideChar
TerminateProcess
VirtualAlloc
GetExitCodeThread
GetModuleHandleA
GetCurrentThreadId
GetFileAttributesW
GetTimeFormatW
GetCurrentProcess
LocalFree
GetStartupInfoW
SetEndOfFile
GetLocaleInfoW
GlobalAlloc
RaiseException
lstrcpynW
GlobalLock
CloseHandle
GetProcAddress
GetModuleHandleW
FreeLibrary
MulDiv
lstrcmpiW
LoadLibraryA
GlobalUnlock
UnhandledExceptionFilter
InterlockedDecrement
lstrcmpW
GetTempPathW
lstrcpyW
GetCurrentProcessId
GetThreadLocale
GetFileTime
HeapAlloc
CreateFileW
InterlockedIncrement
GlobalFree
VirtualFree
GetTickCount
SetErrorMode
IsDBCSLeadByte
GetDateFormatW
LocalAlloc
FindFirstFileW
GetTempFileNameW
GetSystemTimeAsFileTime
GetLastError
InterlockedExchange
user32
GetMessageA
DestroyWindow
SendMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
TranslateMessage
DefWindowProcA
UpdateWindow
DispatchMessageA
gdi32
BitBlt
GetPaletteEntries
CreateHalftonePalette
CreatePatternBrush
GetTextMetricsW
UnrealizeObject
ExtTextOutW
SetTextAlign
CreatePalette
PtVisible
GetBkMode
SetMapMode
GetObjectW
TextOutW
GetDIBits
DeleteObject
CreateRectRgnIndirect
SetBkMode
SetROP2
StretchDIBits
RestoreDC
GetStockObject
ExtFloodFill
GetCurrentObject
GetDeviceCaps
CreateBitmap
SetPixel
CreatePen
DeleteDC
CreateCompatibleBitmap
CreatePolygonRgn
Rectangle
LPtoDP
CreateDIBitmap
StretchBlt
SetViewportExtEx
GetNearestPaletteIndex
CreateDIBSection
TranslateCharsetInfo
MoveToEx
Polyline
CreateFontIndirectW
ResizePalette
GetPixel
PolyBezier
GetNearestColor
SaveDC
CreateCompatibleDC
RealizePalette
EnumFontFamiliesW
PlayMetaFile
CreateICW
SetStretchBltMode
RectVisible
Ellipse
OffsetRgn
PatBlt
CreateDCW
SelectPalette
LineTo
Escape
SetDIBitsToDevice
EnumFontFamiliesExW
SetBrushOrgEx
GetTextColor
SetDIBits
SetTextColor
GetDIBColorTable
SetPaletteEntries
SetBkColor
GetTextExtentPoint32W
SelectObject
CreateSolidBrush
SetDIBColorTable
FillRgn
Polygon
RoundRect
msvcrt
free
__setusermatherr
_ltow
_wcmdln
_wtoi
_wcsicmp
_except_handler3
_onexit
wcschr
_wcsdup
_XcptFilter
_controlfp
_wtol
__CxxFrameHandler
__p__fmode
__wgetmainargs
_beginthreadex
_exit
__p__commode
wcscmp
_getdcwd
wcscat
__argc
_wsplitpath
__set_app_type
_cexit
_initterm
__dllonexit
_adjust_fdiv
_itow
__wargv
_CxxThrowException
_c_exit
_purecall
rand
exit
wcstok
Sections
.text Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ