Static task
static1
Behavioral task
behavioral1
Sample
3079a646b49b74a78749b872f73cc156582ab29d2f2523a68a100392382a5a6d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3079a646b49b74a78749b872f73cc156582ab29d2f2523a68a100392382a5a6d.exe
Resource
win10v2004-20221111-en
General
-
Target
3079a646b49b74a78749b872f73cc156582ab29d2f2523a68a100392382a5a6d
-
Size
195KB
-
MD5
f9dfc5793bb8434710a05b40a6d2df82
-
SHA1
7e595b4517c6b5f2bb8e18e601326f3d11275186
-
SHA256
3079a646b49b74a78749b872f73cc156582ab29d2f2523a68a100392382a5a6d
-
SHA512
a05a90d2ec6973aca2b3feb19c226216e7cb1f8d68b1eee90a66691558d774c73a78d451cda6adbc485bff263c4b73ac185fb044dceb15725c26ee04559a2922
-
SSDEEP
3072:O7St8OCACHTBMcrIvK0VFqqwdSrhhxbtG5DjO+7eTWbERKDfqr1fbmHb:O7w95DJVxwdS1htUDjO+a6rk1fQb
Malware Config
Signatures
Files
-
3079a646b49b74a78749b872f73cc156582ab29d2f2523a68a100392382a5a6d.exe windows x86
618caba3f3147952e9f3ee0e47ed2907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ValidateRect
SetWindowRgn
IsCharAlphaNumericA
GetProcessWindowStation
EnumDesktopsA
SetClassLongA
IsCharUpperW
SetWindowTextA
GetActiveWindow
ole32
CoRevokeClassObject
IIDFromString
kernel32
GetSystemTimeAsFileTime
HeapCreate
HeapAlloc
HeapDestroy
FindResourceExW
SizeofResource
LoadResource
SetFileAttributesA
GetStartupInfoA
HeapFree
GlobalFlags
LocalAlloc
GetThreadContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA
LocalFree
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ