Static task
static1
Behavioral task
behavioral1
Sample
30d5e2e3e138239615c0df490a39681d61a9478d163a57c90c6a81783bf39a40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30d5e2e3e138239615c0df490a39681d61a9478d163a57c90c6a81783bf39a40.exe
Resource
win10v2004-20220812-en
General
-
Target
30d5e2e3e138239615c0df490a39681d61a9478d163a57c90c6a81783bf39a40
-
Size
454KB
-
MD5
01bcaa3ef0350dd4054a238ab71524c0
-
SHA1
722f8c879b0ba327e51625a48fd5a4f7e3c6c3d5
-
SHA256
30d5e2e3e138239615c0df490a39681d61a9478d163a57c90c6a81783bf39a40
-
SHA512
6fd1d8b386400674d24cceb3e74f4eca8915341b39229d4451eab36a2b304d40db0b80c46019012464ba3009ac97f1e77be0014f0b213edd893853a6d3ea7f37
-
SSDEEP
12288:iSmSaCB9XUb42Y98dkqTW2eGEjDPFU305:iLU7XUb42YWkqTW29Wi305
Malware Config
Signatures
Files
-
30d5e2e3e138239615c0df490a39681d61a9478d163a57c90c6a81783bf39a40.exe windows x86
e73077a315f95affd06f5ce663f4f1a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
VirtualProtect
MulDiv
GetFileSizeEx
CreateThread
HeapAlloc
CloseHandle
GetModuleFileNameA
LeaveCriticalSection
ExpandEnvironmentStringsW
WideCharToMultiByte
GetTimeZoneInformation
GetUserDefaultUILanguage
advapi32
CryptHashData
CryptAcquireContextW
RegQueryValueExA
CryptReleaseContext
GetUserNameW
RegCreateKeyExA
CryptDestroyHash
RegSetValueExA
DuplicateTokenEx
RegEnumKeyExA
CryptCreateHash
RegDeleteValueA
shlwapi
PathCombineW
wvnsprintfA
StrStrW
PathRemoveFileSpecW
PathMatchSpecW
SHDeleteKeyA
wvnsprintfW
wnsprintfA
StrCmpNIW
PathFindFileNameW
wnsprintfW
PathFileExistsW
user32
SendMessageA
FindWindowExA
GetCursorPos
EndDialog
ToUnicode
PeekMessageA
GetIconInfo
MsgWaitForMultipleObjects
LoadCursorA
GetWindowTextA
SetThreadDesktop
GetClipboardData
GetClassNameA
GetDlgItemTextA
DispatchMessageA
DrawIcon
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE