Static task
static1
Behavioral task
behavioral1
Sample
79d3cbd06dbbf9d36167d3716ade9d96ce48e3047ce8580b6111cb234b1e8d55.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79d3cbd06dbbf9d36167d3716ade9d96ce48e3047ce8580b6111cb234b1e8d55.exe
Resource
win10v2004-20221111-en
General
-
Target
79d3cbd06dbbf9d36167d3716ade9d96ce48e3047ce8580b6111cb234b1e8d55
-
Size
197KB
-
MD5
ec67b467f21c3d2885387eda8573a4c0
-
SHA1
16f702aec8bf108e36cdee5db0eb6b11da8c9b14
-
SHA256
79d3cbd06dbbf9d36167d3716ade9d96ce48e3047ce8580b6111cb234b1e8d55
-
SHA512
3b5367f232d6ca00a981e59f7d523db6084668ee1a1f9885c94e0119f68cb55d520db37864f9c9e51bb313de9834e4673d305ed0a924a48af065e9ba6f2c24ae
-
SSDEEP
3072:lpEkkjaA9hOef0hsczDSLddjIsli7LKTm2m+YBWCl0XxThtOV7G2XauC/hm:HEda+OM0UxFi7cm1Bv0X5kNquC/hm
Malware Config
Signatures
Files
-
79d3cbd06dbbf9d36167d3716ade9d96ce48e3047ce8580b6111cb234b1e8d55.exe windows x86
2ef87b6e2ee9833f3cd424efb044af42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RealizePalette
GetDIBColorTable
UnrealizeObject
IntersectClipRect
CreateDIBSection
CreateDCW
SetWindowExtEx
SetRectRgn
SetBkMode
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
CreateICW
StartDocW
SetWindowOrgEx
DPtoLP
SetTextColor
GetCharWidth32W
EnumFontFamiliesW
GetDIBits
oleaut32
OleIconToCursor
user32
DefDlgProcA
GetMenuItemRect
RegisterHotKey
CheckDlgButton
ShowWindowAsync
RegisterClassW
TranslateAcceleratorA
EndDialog
SetCaretPos
DrawEdge
CreateDialogParamA
FrameRect
GetUpdateRect
GetDC
DefWindowProcW
ModifyMenuW
WaitForInputIdle
PostThreadMessageA
TranslateMessage
InsertMenuItemW
FindWindowExW
DrawTextA
GetClassLongA
BeginPaint
GetMenuStringA
SendMessageTimeoutW
IsCharAlphaNumericW
GetDialogBaseUnits
SendMessageW
DialogBoxParamW
SetFocus
LoadBitmapW
GetClassInfoExW
InvalidateRgn
CreateDialogParamW
GetDCEx
GetCaretPos
DestroyAcceleratorTable
wvsprintfW
IsCharAlphaW
GetClassNameW
SetMenuDefaultItem
SetSysColors
RedrawWindow
CheckRadioButton
CharToOemW
ShowCursor
SetActiveWindow
TrackPopupMenu
GetAsyncKeyState
DestroyIcon
advapi32
RegDeleteValueA
RegSetValueExW
CryptDestroyKey
RegSetValueExA
NotifyBootConfigStatus
RegCloseKey
kernel32
GlobalReAlloc
SetErrorMode
CompareStringA
lstrcpyA
DuplicateHandle
SetThreadAffinityMask
LoadLibraryW
SetLocalTime
SystemTimeToFileTime
DeleteCriticalSection
SetHandleCount
QueryPerformanceCounter
GetFileType
EnumResourceTypesA
GlobalGetAtomNameW
CreateNamedPipeA
GetLocaleInfoA
GetModuleFileNameA
LocalSize
ClearCommBreak
FindFirstFileA
GetNumberFormatA
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.psikif Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yid Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pox Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hob Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Kuduag Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.refee Size: 512B - Virtual size: 231B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ