Static task
static1
Behavioral task
behavioral1
Sample
270f2fde3a958e5d5b7eddde769fa21701c2a33d65c39c7465246d372dc7d9d9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
270f2fde3a958e5d5b7eddde769fa21701c2a33d65c39c7465246d372dc7d9d9.exe
Resource
win10v2004-20221111-en
General
-
Target
270f2fde3a958e5d5b7eddde769fa21701c2a33d65c39c7465246d372dc7d9d9
-
Size
162KB
-
MD5
e857bdc0aa5495810028b52c10496650
-
SHA1
6583e7bbf65879b42ef15cad8740c670fb15c36f
-
SHA256
270f2fde3a958e5d5b7eddde769fa21701c2a33d65c39c7465246d372dc7d9d9
-
SHA512
ae84dd745f44abcf338f68e66de708b504d8c50e5c4ed87e4f47b1191242e99173f895a2c35d14d20d144f24d3bf931bcd5007ec91e49007ba813c71a29c65d0
-
SSDEEP
3072:qosd7uxw99I52ZxFYdcZL78BHILtLp8K8rsGtkEprJRh5IsKoGY5VZIRCwk:qTuxw9ceKy7sILt9gBkE9Ix
Malware Config
Signatures
Files
-
270f2fde3a958e5d5b7eddde769fa21701c2a33d65c39c7465246d372dc7d9d9.exe windows x86
86251c49a26ea99f508eb3b199bac4bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfW
MessageBoxW
MessageBeep
EndDialog
TranslateMessage
SendMessageW
IsRectEmpty
GetDlgItem
CheckDlgButton
PeekMessageW
CharPrevW
EnableWindow
GetDC
SetRectEmpty
DialogBoxParamW
ReleaseDC
DestroyWindow
IsDlgButtonChecked
SetDlgItemTextW
SendDlgItemMessageW
SetRect
SetDlgItemInt
LoadStringW
msvcrt
__p__commode
__set_app_type
_ftol
malloc
_initterm
??2@YAPAXI@Z
atoi
memmove
_vsnwprintf
_adjust_fdiv
exit
__getmainargs
mbstowcs
??3@YAXPAX@Z
_purecall
free
kernel32
DeleteCriticalSection
LocalAlloc
GetFileSize
lstrcmpW
LeaveCriticalSection
GlobalSize
lstrcpynW
InitializeCriticalSection
CreateFileW
MultiByteToWideChar
lstrlenA
GetSystemTimeAsFileTime
GetLastError
SetUnhandledExceptionFilter
GlobalReAlloc
lstrcatA
GetTickCount
WideCharToMultiByte
SetErrorMode
LocalFree
lstrcpyW
GetCurrentProcessId
CloseHandle
GlobalAlloc
QueryPerformanceCounter
lstrcpyA
IsBadReadPtr
LoadLibraryW
GetACP
GetDiskFreeSpaceW
ReadFile
MulDiv
EnterCriticalSection
WriteFile
GetModuleHandleA
GetFullPathNameW
GetOverlappedResult
ResetEvent
GlobalFree
GlobalUnlock
msacm32
acmStreamPrepareHeader
acmStreamConvert
acmStreamSize
acmStreamUnprepareHeader
acmFormatChooseW
acmFormatTagDetailsW
acmStreamOpen
acmMetrics
acmStreamClose
acmGetVersion
acmFormatDetailsW
acmFormatSuggest
ole32
OleSetClipboard
OleInitialize
CreateStreamOnHGlobal
OleGetClipboard
CoGetMalloc
OleUninitialize
CoMarshalInterface
CoCreateInstance
ReleaseStgMedium
OleFlushClipboard
CoUnmarshalInterface
CoGetMarshalSizeMax
msvfw32
ICCompress
ICCompressorChoose
ICDecompress
ICCompressorFree
ICClose
ICOpen
ICGetInfo
ICSendMessage
ICGetDisplayFormat
winmm
mmioRead
mmioClose
mmioSeek
mmioOpenW
mmioWrite
advapi32
RegQueryValueExA
RegOpenKeyA
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegCloseKey
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ