Static task
static1
Behavioral task
behavioral1
Sample
7e7303f6eaba61858958e2d70d30f647a24c4d67af87af1516dc3bc4db79a76d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7e7303f6eaba61858958e2d70d30f647a24c4d67af87af1516dc3bc4db79a76d.exe
Resource
win10v2004-20220812-en
General
-
Target
7e7303f6eaba61858958e2d70d30f647a24c4d67af87af1516dc3bc4db79a76d
-
Size
227KB
-
MD5
dc81db16905a9740cd61e01c43319a2f
-
SHA1
3eb870fef9acb7242e9fec9feab8d31d07a89261
-
SHA256
7e7303f6eaba61858958e2d70d30f647a24c4d67af87af1516dc3bc4db79a76d
-
SHA512
c921006524b51ae02a378dc6acf885f557b588d2833e248aad84afb74877a3fd41edbbccef63d165fde4f5d11198641a3463dad904366df37414025bf7a1402f
-
SSDEEP
1536:3+uOCKy4wGBhQBY7NWee7COfMWrWy1FZTVfDyo7RUQj4TfLKo3QPpLHJG3h:uu33GfQBY7NWeCNrWyXys1kTuouHQ
Malware Config
Signatures
Files
-
7e7303f6eaba61858958e2d70d30f647a24c4d67af87af1516dc3bc4db79a76d.exe windows x86
9b144eb25d4e6b137ad8ba0399998b8b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
CreatePipe
GetBinaryTypeA
CreateHardLinkW
WriteConsoleInputW
WriteConsoleInputW
SetThreadExecutionState
LocalFlags
Process32First
GetBinaryTypeA
SetHandleInformation
SetHandleInformation
SetConsoleActiveScreenBuffer
WritePrivateProfileSectionW
AddAtomW
Heap32ListFirst
WritePrivateProfileSectionW
FileTimeToDosDateTime
WritePrivateProfileSectionA
CreateHardLinkW
SetHandleInformation
Process32First
WritePrivateProfileSectionW
ReadConsoleA
GlobalAddAtomA
LocalShrink
GetCommMask
Process32First
GetBinaryTypeA
AddAtomW
GetCommMask
GetProcessShutdownParameters
ExpandEnvironmentStringsA
Thread32Next
DisconnectNamedPipe
WriteConsoleInputW
GlobalFlags
GlobalFlags
ReadConsoleA
SetHandleInformation
GetBinaryTypeA
CreatePipe
GetSystemTime
CallNamedPipeW
ReadConsoleInputW
SetConsoleActiveScreenBuffer
AddAtomW
WritePrivateProfileSectionW
ClearCommBreak
WritePrivateProfileSectionW
GetCommTimeouts
GetProcessShutdownParameters
WritePrivateProfileSectionW
GetThreadTimes
FindCloseChangeNotification
FindNextFileW
GetThreadTimes
CreateConsoleScreenBuffer
SetHandleInformation
IsValidLocale
GetThreadTimes
GetSystemDirectoryW
Thread32Next
user32
GetMouseMovePointsEx
DdeCmpStringHandles
GetWindowRgn
EnumDisplaySettingsExW
VkKeyScanExA
CallNextHookEx
CreateWindowExA
FindWindowExW
UpdateWindow
CharPrevW
SetProcessWindowStation
FindWindowA
PostThreadMessageA
GetTitleBarInfo
GetTitleBarInfo
RegisterClassExW
CreateDialogParamA
TranslateAcceleratorA
InSendMessage
DdeConnectList
EnumDisplaySettingsExW
SetWindowsHookW
FindWindowExA
SetWindowsHookW
CharPrevW
EnumDisplaySettingsExW
GetWindowRgn
UnhookWindowsHookEx
MonitorFromPoint
UnhookWindowsHookEx
CreateWindowExA
LockWindowUpdate
FindWindowExA
RegisterClassExW
GetWindowRgn
CreateDialogParamA
CallNextHookEx
IMPGetIMEA
GetClientRect
DdeCmpStringHandles
SetMenuItemInfoA
WINNLSEnableIME
RegisterClassExW
EnumDisplaySettingsExW
IsZoomed
DdeReconnect
GetThreadDesktop
GetTitleBarInfo
WINNLSEnableIME
PostThreadMessageA
SetWindowTextA
SetWindowsHookW
WINNLSGetEnableStatus
TranslateAcceleratorA
DdeQueryStringW
SetWindowTextA
EnumDisplaySettingsExW
UpdateWindow
PostThreadMessageA
WaitForInputIdle
CallNextHookEx
SetWindowTextA
SetWindowTextA
GetWindowRgn
EnumDisplaySettingsExW
CallNextHookEx
FindWindowA
UnhookWindowsHookEx
UpdateWindow
EnumDisplaySettingsExW
Sections
.text Size: 208KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tabl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tabl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tabl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tabl Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tabl Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE