Static task
static1
Behavioral task
behavioral1
Sample
905570fe738c8d94aebe4922f1ae1e3e6373a668d2b246fbd26a3e5fd7871971.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
905570fe738c8d94aebe4922f1ae1e3e6373a668d2b246fbd26a3e5fd7871971.exe
Resource
win10v2004-20220812-en
General
-
Target
905570fe738c8d94aebe4922f1ae1e3e6373a668d2b246fbd26a3e5fd7871971
-
Size
288KB
-
MD5
4243ff07d89c9c2af4aa4d454979f369
-
SHA1
a10542960d987d1526820d186f8fe79f89eb7774
-
SHA256
905570fe738c8d94aebe4922f1ae1e3e6373a668d2b246fbd26a3e5fd7871971
-
SHA512
2102342ef8ee381bab4a8f538d6327a7d968094e0046b837e6e24f9b7c425fa678a45689d63b3f31d0f46f29e265fa93e7ea7d2bbb11b637a770e9b7c46ce4de
-
SSDEEP
6144:zo1WKQBJSsWGFustFC1lVc3uU4d/t56jdxRHJ2PfDC:k1WnnFJu+wrowt56jdh2b
Malware Config
Signatures
Files
-
905570fe738c8d94aebe4922f1ae1e3e6373a668d2b246fbd26a3e5fd7871971.exe windows x86
33fec72379feb35ce110fcb5f695c29b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsZoomed
WindowFromPoint
SetWindowPos
IsIconic
BeginDeferWindowPos
GetWindowRect
IsWindowUnicode
EndDialog
GetWindowTextLengthA
GetLastActivePopup
SetDlgItemInt
AdjustWindowRect
ShowWindow
GetForegroundWindow
GetWindowPlacement
gdi32
ExcludeClipRect
GetBitmapDimensionEx
ChoosePixelFormat
DeleteDC
Chord
GetBkColor
GetBkMode
CopyMetaFileA
CreateFontA
CreateFontW
CreateSolidBrush
GdiFlush
CreateDiscardableBitmap
GdiGetBatchLimit
advapi32
RegQueryValueExA
AccessCheck
BackupEventLogA
ClearEventLogW
RegisterEventSourceW
NotifyChangeEventLog
OpenEventLogA
SetTokenInformation
OpenEventLogW
OpenBackupEventLogA
RegUnLoadKeyA
shlwapi
PathCompactPathA
PathBuildRootW
StrRChrIA
PathIsRelativeA
StrCSpnIW
StrCSpnIA
PathIsRootA
PathFindNextComponentA
StrCmpNW
PathAddBackslashA
SHQueryInfoKeyA
PathRemoveBackslashW
PathRelativePathToW
kernel32
ReleaseMutex
SetLocaleInfoA
GlobalMemoryStatus
GlobalSize
GetDateFormatA
OpenEventA
HeapFree
CreateMutexA
HeapAlloc
GetPrivateProfileStringA
GetStartupInfoA
GetModuleHandleA
GetProcAddress
VirtualAllocEx
GetStringTypeA
DeleteCriticalSection
credui
CredUIParseUserNameW
CredUIParseUserNameA
CredUIReadSSOCredW
CredUIStoreSSOCredW
winscard
SCardReconnect
msvcrt
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 322KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ