Static task
static1
Behavioral task
behavioral1
Sample
is152159.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
is152159.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
rett11.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
rett11.exe
Resource
win10v2004-20220812-en
General
-
Target
3333d36d622b1da60b30fcb64d0382028ae05a8f46608b48c322f5be3936cdd4
-
Size
48KB
-
MD5
3cb4eda734c85ea359e6c66fb01b2549
-
SHA1
f700fedade3295e3da5040e54ab3a7f4e057ed47
-
SHA256
3333d36d622b1da60b30fcb64d0382028ae05a8f46608b48c322f5be3936cdd4
-
SHA512
9c728cc86f3a2a45eeba41591f738d3cd750f6d107d5890153921cd8762d620b8335bb66552e9e55df73b325402d2c54e6b95c1dec9a3373469bc7dbb8ff99ea
-
SSDEEP
768:9Tmu48HW9pDJzIqnww6+eAHe57zLKjchQnDHZVGR600fRsY8iSQZq9IyjfnLLe+d:xH4R3vcAm7zRhuDKkR5kQZqWGnAO
Malware Config
Signatures
Files
-
3333d36d622b1da60b30fcb64d0382028ae05a8f46608b48c322f5be3936cdd4.cab
-
is152159.exe.exe windows x86
ac6d1ff9e17f92c00347894c640da510
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassA
MessageBoxIndirectA
MessageBoxA
LoadAcceleratorsA
GetMessageA
GetDlgItem
EqualRect
DrawIcon
CreateCursor
CloseWindow
CharToOemA
ChangeMenuA
ActivateKeyboardLayout
kernel32
LoadLibraryA
TlsAlloc
SleepEx
Sleep
RaiseException
MapViewOfFile
lstrcmpiA
lstrcmpA
WriteFile
VirtualFree
VirtualAlloc
UnmapViewOfFile
TlsSetValue
EnumResourceTypesA
ExitProcess
GetModuleHandleA
GetPrivateProfileStringA
GetSystemTimeAsFileTime
GetVersion
GetVersionExA
InitializeCriticalSection
LocalAlloc
TlsFree
oleaut32
OleTranslateColor
SafeArrayAccessData
SafeArrayAllocDescriptor
VarBstrCmp
OleIconToCursor
Sections
.text Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
rett11.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE