Static task
static1
Behavioral task
behavioral1
Sample
958d45aee177d2afb58979e296a785d308ddc5daf75a43ba67bfa804549daff4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
958d45aee177d2afb58979e296a785d308ddc5daf75a43ba67bfa804549daff4.exe
Resource
win10v2004-20220812-en
General
-
Target
958d45aee177d2afb58979e296a785d308ddc5daf75a43ba67bfa804549daff4
-
Size
166KB
-
MD5
a2792cd70a33201395edb90216ea72f9
-
SHA1
08d54a14eafefda2c31c47196f5047ecbc19bbf2
-
SHA256
958d45aee177d2afb58979e296a785d308ddc5daf75a43ba67bfa804549daff4
-
SHA512
0c5c7b6a223d78aa04a7b62ec7b8b15e61544db3cea7d5d9f815016747086297342d52e40c1f0622e404e0bc8ef10adbe0a3d549805e2d654ab5033c8180105d
-
SSDEEP
3072:DuokoTdcgY2hmgMxEMETGgXBCGyeL84JtG1lbkl9zme00MnweLXG1DYN0uFsCiep:DuodTJ4RaGgX1yelJtll8e00u/W6N0uh
Malware Config
Signatures
Files
-
958d45aee177d2afb58979e296a785d308ddc5daf75a43ba67bfa804549daff4.exe windows x86
82ca54496677e3e2885039aa9e726a53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumePathNameW
SetThreadPriorityBoost
GetStartupInfoA
RemoveDirectoryW
ExitThread
LoadLibraryExA
SuspendThread
GetShortPathNameA
SetupComm
FindNextVolumeW
GetCurrentProcessId
GetFileType
GlobalUnfix
LeaveCriticalSection
GetModuleHandleA
GetNumberOfConsoleMouseButtons
FlushInstructionCache
GetLocaleInfoW
_hwrite
GetWindowsDirectoryA
LCMapStringW
GetModuleFileNameA
SetComputerNameW
Beep
GetCPInfo
AllocateUserPhysicalPages
msvcrt
_adjust_fdiv
_controlfp
_acmdln
exit
_setjmp
memchr
isprint
__p__fmode
_adj_fdivr_m64
_wperror
_strrev
_XcptFilter
_exit
_pwctype
vfprintf
realloc
_heapused
wcschr
_wcsrev
__p__commode
_wstrtime
__set_app_type
wcscoll
__getmainargs
_except_handler3
_mbctokata
_initterm
_mbsspnp
_mbsnset
_heapset
_mbscmp
_findfirst
__setusermatherr
gdi32
OffsetRgn
SetWindowOrgEx
GetEnhMetaFileA
DPtoLP
GetCharacterPlacementA
CloseEnhMetaFile
GetSystemPaletteUse
StretchDIBits
PlayMetaFile
AddFontResourceA
GetDIBits
GetWindowOrgEx
SetPolyFillMode
GdiSetBatchLimit
GetKerningPairsA
GdiDeleteSpoolFileHandle
GdiStartPageEMF
LineTo
EndDoc
StartDocW
GdiGetSpoolFileHandle
GetTextCharsetInfo
RectVisible
PolyTextOutA
GetMetaFileBitsEx
AddFontResourceExA
StartFormPage
user32
GetUserObjectInformationW
SetPropA
SetDlgItemTextW
GetKBCodePage
GetDC
SetClipboardData
TranslateAcceleratorA
SetMenuDefaultItem
CreateAcceleratorTableW
DdeQueryStringW
GetKeyboardLayoutNameA
UserHandleGrantAccess
DdeEnableCallback
UnhookWindowsHookEx
RegisterHotKey
PostMessageA
RegisterClipboardFormatW
ShowScrollBar
ScrollWindow
GetClipCursor
CloseDesktop
SetMenuInfo
DdeFreeDataHandle
IsRectEmpty
ScrollWindowEx
DlgDirSelectComboBoxExW
CloseWindowStation
MessageBoxExW
GetKeyboardState
CharUpperW
LoadKeyboardLayoutW
GetMenuContextHelpId
GetCapture
GetCaretBlinkTime
CreateIconFromResourceEx
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ