Static task
static1
Behavioral task
behavioral1
Sample
57da25dfaca74a893b1eda0ac6eeec419f15c63512eba85402aedc84a2a3739a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
57da25dfaca74a893b1eda0ac6eeec419f15c63512eba85402aedc84a2a3739a.exe
Resource
win10v2004-20220812-en
General
-
Target
57da25dfaca74a893b1eda0ac6eeec419f15c63512eba85402aedc84a2a3739a
-
Size
4.1MB
-
MD5
d954f35f993e6c5309b448b0c5ef4e8f
-
SHA1
922c349037732a06e4a21a332756e4493ba87a1c
-
SHA256
57da25dfaca74a893b1eda0ac6eeec419f15c63512eba85402aedc84a2a3739a
-
SHA512
410143a6730e717fc31ecf5eb78e4ec808adba1895483bbcc024ddf59b5cdb9b4777c7ec03f85fa370acd1cfcce2973548e89c4232a923d2d170588c51424382
-
SSDEEP
98304:QM6odIbVnaVgcKmnOsihq8scQ9cYepeBFcysJ7Gb:UoscWcbnOsihq8s99cYepsFcV0b
Malware Config
Signatures
Files
-
57da25dfaca74a893b1eda0ac6eeec419f15c63512eba85402aedc84a2a3739a.exe windows x86
a1bf3a3f9154607f852510eb45e714af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
CreateProcessA
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetThreadContext
GetStringTypeW
GetModuleHandleA
SetThreadContext
ReadFile
LoadLibraryA
HeapCreate
GetProcAddress
user32
BeginPaint
DrawAnimatedRects
DrawCaption
DrawEdge
DrawFocusRect
DrawFrameControl
DrawStateA
DrawTextExA
EndPaint
ExcludeUpdateRgn
GetUpdateRect
GetUpdateRgn
GetWindowDC
GetWindowRgn
LockWindowUpdate
PaintDesktop
PeekMessageA
GetMessageA
DispatchMessageA
SetTimer
gdi32
GdiGetBatchLimit
GetBoundsRect
GetROP2
SetBkColor
GdiFlush
GdiSetBatchLimit
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IDATA Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WWKFHEF Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
K8XP69 Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SMXHEF Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AS46AW Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
APHC0T Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SFQJ62 Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PPIN3I Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EG1NDWI Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JYMZ6NJ Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MTDWF6D Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FHCDVF Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JYT1JV Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AFTEEU Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WCYGBI Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HJFWCK Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CDOHNQ Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LKGVI3L Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KKHTLWB Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HPMELYK Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FJPHY3 Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ