Static task
static1
Behavioral task
behavioral1
Sample
956944248367fafacec4fbc3021c25ed54d16a7b745cf4a6f738f65eb9e27115.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
956944248367fafacec4fbc3021c25ed54d16a7b745cf4a6f738f65eb9e27115.exe
Resource
win10v2004-20221111-en
General
-
Target
956944248367fafacec4fbc3021c25ed54d16a7b745cf4a6f738f65eb9e27115
-
Size
41KB
-
MD5
4a7a4c9291babe7e74593999ba1dcc80
-
SHA1
fdff5a98730eda6949c9f1bec2df0d69dba5cb47
-
SHA256
956944248367fafacec4fbc3021c25ed54d16a7b745cf4a6f738f65eb9e27115
-
SHA512
8e2505ab3f267c30c4692a0fc31d112d1e3b99d31659cbd114efa175fcc6b49f4b10d1b400149529b482e020b8f8ed640308c409c8b6b3cd740801d8cc7f761d
-
SSDEEP
768:3OvxNT4h8AomMDF/otuufDPNx/+sAM7/69fl+erleSb/:+vxNT46AAoRFbyl+2b/
Malware Config
Signatures
Files
-
956944248367fafacec4fbc3021c25ed54d16a7b745cf4a6f738f65eb9e27115.exe windows x86
3c0593f70cab923a9958cb1416e60841
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
EndDialog
AnyPopup
GetNextDlgTabItem
ShowOwnedPopups
ole32
CoDisconnectObject
CoGetMalloc
GetRunningObjectTable
CreateClassMoniker
CoMarshalInterface
BindMoniker
kernel32
GetEnvironmentStrings
LCMapStringW
LCMapStringA
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
GetTimeFormatA
CompareStringA
GetPrivateProfileSectionA
GetProfileIntA
WriteProfileStringA
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhhdnk Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zpoa Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ