Static task
static1
Behavioral task
behavioral1
Sample
876ead6a34a977ec336c459218337fe322872ea92cc7ae5b44f167c1a380ad74.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
876ead6a34a977ec336c459218337fe322872ea92cc7ae5b44f167c1a380ad74.exe
Resource
win10v2004-20220901-en
General
-
Target
876ead6a34a977ec336c459218337fe322872ea92cc7ae5b44f167c1a380ad74
-
Size
255KB
-
MD5
95c7ffcb1ec86b5b536a06da00e285be
-
SHA1
090d95ad44985d03245e70b5efb596364eae0b75
-
SHA256
876ead6a34a977ec336c459218337fe322872ea92cc7ae5b44f167c1a380ad74
-
SHA512
acfe898ef65922a4b757780b8aefedbe012b164dca4c8053ef22c4b3ef271275cc41e8574ff517f29ad6c210a85d7edd1488c22a2e867d928b8f8d3a612f2e12
-
SSDEEP
6144:f0iDRGM8BdubTN4VPa3D6p2izPEYfo99Ujin:f0iDMBdyx6p2izPr2P
Malware Config
Signatures
Files
-
876ead6a34a977ec336c459218337fe322872ea92cc7ae5b44f167c1a380ad74.exe windows x86
cf32e8730bf9b63aac638fb641c0909d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
ExitProcess
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
GetVersionExA
GetProcessHeap
GetLastError
TlsAlloc
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
GetEnvironmentVariableA
HeapCreate
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
LoadLibraryA
InitializeCriticalSection
MultiByteToWideChar
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
LoadLibraryW
GetLocaleInfoA
GetLocaleInfoW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatA
GetDateFormatA
Beep
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
CreateDirectoryA
RemoveDirectoryA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
MoveFileA
RaiseException
GetExitCodeProcess
WaitForSingleObject
GetSystemInfo
DuplicateHandle
CreatePipe
SystemTimeToFileTime
lstrcmpW
GetProcAddress
winipsec
SetMMFilter
GetMMAuthMethods
user32
WinHelpA
PeekMessageW
EnumWindows
CreateDesktopA
GetMessageA
GetCapture
EndDialog
ShowWindow
EndMenu
GetSystemMetrics
CreateAcceleratorTableA
LoadMenuA
SetDlgItemTextA
IsIconic
SetCapture
LoadBitmapA
ActivateKeyboardLayout
FindWindowW
CharNextW
DestroyMenu
ShowCursor
LoadMenuIndirectW
AdjustWindowRect
PostMessageA
LoadImageW
DialogBoxParamW
GetMenuItemCount
RegisterClassW
RegisterClassExA
PostMessageW
AppendMenuW
CreateDesktopW
OffsetRect
GetActiveWindow
LoadCursorW
LoadMenuIndirectA
GetClassInfoExW
gdi32
GetStockObject
CreateFontIndirectW
CreateBrushIndirect
CreateDIBSection
CreateSolidBrush
CreateRectRgn
CreateColorSpaceA
SetMetaFileBitsEx
DeleteObject
icm32
CMDeleteTransform
CMTranslateRGBs
CMCreateMultiProfileTransform
CMCheckRGBs
Sections
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TyIWNA Size: 106KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eb Size: 109KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ