Static task
static1
Behavioral task
behavioral1
Sample
80f5469a4d55d45654929fa8eb46191d3839e222ba822d45ed4ca6d6aac14162.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80f5469a4d55d45654929fa8eb46191d3839e222ba822d45ed4ca6d6aac14162.exe
Resource
win10v2004-20221111-en
General
-
Target
80f5469a4d55d45654929fa8eb46191d3839e222ba822d45ed4ca6d6aac14162
-
Size
275KB
-
MD5
602f02d3c5711d1975959f519cbd11ca
-
SHA1
5f521a9bb13ad7be5801d965552b6bdccc4fdced
-
SHA256
80f5469a4d55d45654929fa8eb46191d3839e222ba822d45ed4ca6d6aac14162
-
SHA512
56385210eb703e4b7ac4296792680a90541dffb13403271b4164da6a8d6c3cb5a10b0a905a1bb9678d704bd826429cc56e7327f568db18170d15ed85cc91f551
-
SSDEEP
6144:oN/HLlhG/8jNQMyTfyZ1wafKa7Rs7PuJK6:oNpdNBEeK43
Malware Config
Signatures
Files
-
80f5469a4d55d45654929fa8eb46191d3839e222ba822d45ed4ca6d6aac14162.exe windows x86
521589f4452e343b202bc6e52405aa77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBitmapBits
DeleteObject
BitBlt
GetDeviceCaps
CreateCompatibleBitmap
GetObjectA
CreateCompatibleDC
DeleteDC
SelectObject
CreateDCA
wininet
InternetTimeFromSystemTimeA
kernel32
GetCurrentThreadId
EnterCriticalSection
GetFileSize
MapViewOfFile
UnhandledExceptionFilter
DisableThreadLibraryCalls
FindResourceW
HeapSize
CreateFileW
SystemTimeToFileTime
LocalFree
SetLastError
HeapDestroy
LoadResource
FreeLibrary
WideCharToMultiByte
CloseHandle
HeapReAlloc
LocalAlloc
GetSystemTime
DeleteCriticalSection
LockResource
GetSystemTimeAsFileTime
GetProcessHeap
UnmapViewOfFile
GlobalFree
HeapFree
IsDebuggerPresent
lstrlenA
SetUnhandledExceptionFilter
GetTempPathW
HeapAlloc
LeaveCriticalSection
FindResourceExW
GetTempFileNameW
SizeofResource
OutputDebugStringW
lstrlenW
LoadLibraryExW
RaiseException
ReadFile
CreateFileMappingW
TlsAlloc
VirtualAllocEx
IsBadWritePtr
userenv
GetAllUsersProfileDirectoryA
RegisterGPNotification
DestroyEnvironmentBlock
GetNextFgPolicyRefreshInfo
RefreshPolicyEx
RsopResetPolicySettingStatus
els
DllGetClassObject
Sections
.text Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zOXAv Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cHdMa Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.KOfWK Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nvpMVbC Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Vgxl Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kNtPJtC Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.XnlX Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qMYDFcC Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdxPFcC Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ErxaFcC Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IOPFELA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ