Static task
static1
Behavioral task
behavioral1
Sample
d4228394367ba65134982b8a8bc7746141ad434d4fdb0386fa49772afbe44fb1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4228394367ba65134982b8a8bc7746141ad434d4fdb0386fa49772afbe44fb1.exe
Resource
win10v2004-20220812-en
General
-
Target
d4228394367ba65134982b8a8bc7746141ad434d4fdb0386fa49772afbe44fb1
-
Size
1.3MB
-
MD5
295e02c529ed328d0ff321ab839836fe
-
SHA1
af9962b65f4a0d80ebec51675d81c0fb833a89ec
-
SHA256
d4228394367ba65134982b8a8bc7746141ad434d4fdb0386fa49772afbe44fb1
-
SHA512
54055f58fae1677f6220ef90098190e5aa87e4cdc419acf3d15ac666ad5edb72f450ccc7a930ca36a1fa0bf64efb823701f43c10e2a59901349912df7b3063c1
-
SSDEEP
24576:wy3Gi39u1CpCC5yLlkQgSjQHIiKIC/edjlNFfGLpsDfAddbVKJ:wUGi3GycgS0lKTW+LpsTydYJ
Malware Config
Signatures
Files
-
d4228394367ba65134982b8a8bc7746141ad434d4fdb0386fa49772afbe44fb1.exe windows x86
ae19ab3432e204e0dc11cebe7463b05f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
CheckMenuItem
EndPaint
GetSysColorBrush
GetLastActivePopup
CallNextHookEx
GetSysColor
DispatchMessageA
GetCapture
DispatchMessageW
IsChild
CharLowerBuffA
GetMenuItemCount
GetDC
GetActiveWindow
GetClassInfoA
DefWindowProcA
GetFocus
CallWindowProcA
IsWindowVisible
EnumThreadWindows
SetTimer
kernel32
HeapDestroy
LocalFree
GetCommandLineA
SetEndOfFile
SetEvent
FindFirstFileA
LoadLibraryExA
GetStringTypeA
ReadFile
WaitForSingleObject
CreateEventA
VirtualAlloc
CreateFileA
FreeResource
GetProcAddress
SetThreadLocale
Sleep
GetCurrentThread
GlobalAlloc
SetHandleCount
LocalAlloc
GetStdHandle
FindClose
EnumCalendarInfoA
WriteFile
ExitThread
LockResource
LoadLibraryA
FormatMessageA
LoadResource
GetDateFormatA
GetStringTypeW
GetCPInfo
GetVersionExA
FindResourceA
HeapAlloc
VirtualAllocEx
GetTickCount
GetModuleHandleA
GetLastError
CloseHandle
VirtualQuery
ExitProcess
GetFileSize
GetCurrentProcessId
SetFilePointer
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 693KB - Virtual size: 693KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 345KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 937B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ