Static task
static1
Behavioral task
behavioral1
Sample
f86ab2d03c799b2814907ffbdb1c5f71c082e674cd6dbfb5474c0ee195662664.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f86ab2d03c799b2814907ffbdb1c5f71c082e674cd6dbfb5474c0ee195662664.exe
Resource
win10v2004-20220901-en
General
-
Target
f86ab2d03c799b2814907ffbdb1c5f71c082e674cd6dbfb5474c0ee195662664
-
Size
574KB
-
MD5
2c7f6bf903730a7b1b399c4f66ce10cd
-
SHA1
b28e26de390bb4facc638f6cfe2e7dd4cf976f28
-
SHA256
f86ab2d03c799b2814907ffbdb1c5f71c082e674cd6dbfb5474c0ee195662664
-
SHA512
24aad7edd2d20d50741c90d3678021a3a25ac2f98d84747a813e943f26c80094e2f4045279e6089dc6db714469d2c9c3a937bb1a33c8be3f1317ab560dd29ff9
-
SSDEEP
12288:aJw1Rdfmavdoa2SKsw1QNGXYAPfmcOYnkWZmsy2g8YgT:aC1n1G+ORPfP9Zty23
Malware Config
Signatures
Files
-
f86ab2d03c799b2814907ffbdb1c5f71c082e674cd6dbfb5474c0ee195662664.exe windows x86
9cb407f8f84e233aa5ebc403032a7238
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
compstui
SetCPSUIUserData
CommonPropertySheetUIW
GetCPSUIUserData
CommonPropertySheetUIA
winmm
mciSendStringW
d3d8thk
OsThunkDdLockD3D
dssec
DllGetClassObject
DSCreateISecurityInfoObjectEx
DSEditSecurity
DllCanUnloadNow
DSCreateSecurityPage
DSCreateISecurityInfoObject
msvbvm60
rtcSLN
__vbaCVarAryUdt
__vbaVarTextCmpNe
_adj_fdivr_m16i
rtcCommandBstr
EbGetObjConnectionCounts
__vbaLenVarB
GetMem8
__vbaBoolStr
rtcCos
rtcLeftVar
EbSetContextWorkerThread
rtcGetDayOfWeek
PutMemObj
__vbaObjVar
__vbaI2Str
rtcGetCurrentCalendar
sisbkup
SisRestoredLink
SisFreeAllocatedMemory
SisFreeRestoreStructure
SisCSFilesToBackupForLink
SisCreateBackupStructure
SisRestoredCommonStoreFile
SisCreateRestoreStructure
SisFreeBackupStructure
kernel32
VirtualAlloc
GlobalUnWire
GetNumberOfConsoleFonts
WaitForSingleObject
DnsHostnameToComputerNameW
Sleep
WriteConsoleOutputW
ConnectNamedPipe
GlobalHandle
GetSystemDirectoryA
DeleteTimerQueueEx
GetCalendarInfoW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 480KB - Virtual size: 479KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 14.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE