Static task
static1
Behavioral task
behavioral1
Sample
339a3b7b1d5c4ab74382e7415d608698530fc41d798ef86ae357b12495cdd148.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
339a3b7b1d5c4ab74382e7415d608698530fc41d798ef86ae357b12495cdd148.exe
Resource
win10v2004-20220812-en
General
-
Target
339a3b7b1d5c4ab74382e7415d608698530fc41d798ef86ae357b12495cdd148
-
Size
40KB
-
MD5
f2ef6a6ca3b4d8dc499dbfc889165a37
-
SHA1
787c2f1575ff8fc4981cd969ecc5e166fb0f1a32
-
SHA256
339a3b7b1d5c4ab74382e7415d608698530fc41d798ef86ae357b12495cdd148
-
SHA512
088439aa500402c090f93057c535fa5484ce23fb3ef6a1c5ff2beaa74efedbba19e6b35997563b056b94f7dd9bd8601915cb8bdeb691e9e20c43930fc3dc6ca6
-
SSDEEP
768:4hTM75663MKH+3PIRJbQj5WQjvsbUkYv+zhFvDQB1hCDtTVlkx2Wg9JpB8x:4ZMVJ1pnlbWv+zjM2TLWg9DWx
Malware Config
Signatures
Files
-
339a3b7b1d5c4ab74382e7415d608698530fc41d798ef86ae357b12495cdd148.exe windows x86
484df7450e9b2e0144459f1c4676ac0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckMenuItem
LoadIconA
OpenClipboard
GetCursorPos
MoveWindow
ReleaseDC
InflateRect
GetActiveWindow
PtInRect
TrackPopupMenu
LoadStringW
DefWindowProcW
GetMenuStringW
SendMessageW
SetWindowTextW
GetWindowLongW
GetWindowTextLengthA
DestroyMenu
DestroyIcon
AllowSetForegroundWindow
UnregisterClassA
GetMenu
RegisterClassW
SetCapture
SetWindowPos
SetActiveWindow
PostMessageW
GetClientRect
CreateWindowExW
GetSubMenu
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
LocalFree
InterlockedDecrement
InitializeCriticalSection
GetFileSizeEx
ReadFile
GetStartupInfoW
GetTickCount
InterlockedCompareExchange
SetFilePointerEx
GetCurrentThreadId
LeaveCriticalSection
GetVersionExA
TerminateProcess
GetCurrentProcess
FreeLibrary
EnterCriticalSection
WideCharToMultiByte
GetStdHandle
UnhandledExceptionFilter
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetLastError
GetModuleHandleA
GetModuleHandleW
VirtualAlloc
TryEnterCriticalSection
SetFilePointer
InterlockedIncrement
CloseHandle
FreeLibraryAndExitThread
WaitForSingleObject
MultiByteToWideChar
WriteFile
InterlockedExchange
HeapFree
GetVersionExW
Sleep
GetACP
GetModuleFileNameW
QueryPerformanceCounter
SetLastError
CreateFileA
LoadLibraryA
RaiseException
ExitProcess
CreateFileW
SetUnhandledExceptionFilter
DeleteCriticalSection
GetEnvironmentStringsW
FindClose
WaitForSingleObjectEx
GetModuleFileNameA
gdi32
CreateRectRgn
CreateDCA
CreateSolidBrush
CreatePolygonRgn
CreateFontIndirectW
shlwapi
PathFindFileNameA
PathIsURLW
PathCanonicalizeW
PathRenameExtensionW
PathRemoveBlanksW
PathRemoveFileSpecA
PathAddBackslashA
SHCreateStreamOnFileW
SHGetValueW
PathCommonPrefixW
PathRemoveExtensionW
PathIsRelativeW
PathStripToRootW
SHDeleteKeyW
PathAddBackslashW
PathFindExtensionW
PathRemoveBackslashW
PathCombineW
PathFileExistsW
PathAppendW
PathFindFileNameW
SHSetValueW
PathStripPathW
PathRemoveFileSpecW
PathAppendA
AssocQueryStringW
PathFileExistsA
StrCmpW
StrStrIW
PathIsDirectoryW
StrCmpNIW
StrToIntW
StrStrW
StrCmpNW
StrStrIA
StrToIntExW
PathIsFileSpecW
PathRelativePathToW
SHDeleteValueW
PathIsRootW
StrCmpIW
PathFindExtensionA
setupapi
SetupUninstallOEMInfA
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
strlen
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ