Static task
static1
Behavioral task
behavioral1
Sample
76af5656881eb198fa88b9ecc0fb82a3035ede94bed751d14a6eb0efa22216ba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
76af5656881eb198fa88b9ecc0fb82a3035ede94bed751d14a6eb0efa22216ba.exe
Resource
win10v2004-20220812-en
General
-
Target
76af5656881eb198fa88b9ecc0fb82a3035ede94bed751d14a6eb0efa22216ba
-
Size
5.8MB
-
MD5
ee7b28c49d11466e07b9cca7ce26a002
-
SHA1
e21386de9d8c920e558d1c2fec273a3f379cccb5
-
SHA256
76af5656881eb198fa88b9ecc0fb82a3035ede94bed751d14a6eb0efa22216ba
-
SHA512
260b07f1bc3a39289eda49678d6d2175a3eb0b6311310424991247481d1fdf534f055d61cbeb9b3527b75d05026ed9a3d042971925065d1dd347cc0766efa7ec
-
SSDEEP
98304:iDaVAHX4KwAvCQR08E7wjspdF0/AIonHokcahXKJf1TlyKssexc7o4N:iOuwAvCQAMsNPJHokPhX+ffyZsewo4N
Malware Config
Signatures
Files
-
76af5656881eb198fa88b9ecc0fb82a3035ede94bed751d14a6eb0efa22216ba.exe windows x86
7b4ce3e9953d74c66bc2d2aa36624db6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetCurrentThreadId
WriteFile
SystemTimeToFileTime
lstrcmpiW
LoadLibraryA
HeapSize
SetEvent
lstrlenA
GlobalFree
FreeEnvironmentStringsA
GetSystemInfo
GetModuleFileNameA
DeleteCriticalSection
InterlockedCompareExchange
GetLocalTime
TlsAlloc
GetOEMCP
lstrcpyA
LCMapStringW
GetCurrentProcessId
CloseHandle
GetProcAddress
user32
TranslateMessage
UnregisterClassW
GetDlgCtrlID
CharNextA
SendMessageW
IsWindow
PostMessageW
IsWindowVisible
LoadStringA
KillTimer
DialogBoxParamW
PeekMessageW
GetParent
GetSubMenu
gdi32
LineTo
CreateSolidBrush
GetPixel
RestoreDC
Escape
GetCharWidthA
Rectangle
SetBkColor
CreatePatternBrush
advapi32
OpenSCManagerW
GetSecurityDescriptorLength
CryptGetHashParam
ImpersonateLoggedOnUser
CryptImportKey
MakeSelfRelativeSD
QueryServiceConfigW
RegDeleteKeyW
RegOpenKeyExW
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ