Static task
static1
Behavioral task
behavioral1
Sample
767b0e1737a4f3e79d45045d38cebf09b6df48304a62ca28802dd41d3010b898.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
767b0e1737a4f3e79d45045d38cebf09b6df48304a62ca28802dd41d3010b898.exe
Resource
win10v2004-20220901-en
General
-
Target
767b0e1737a4f3e79d45045d38cebf09b6df48304a62ca28802dd41d3010b898
-
Size
620KB
-
MD5
625e75fbbae9d9a38972e8c545a831a6
-
SHA1
b549651218128cba49fe607299e218f6b7ab46a9
-
SHA256
767b0e1737a4f3e79d45045d38cebf09b6df48304a62ca28802dd41d3010b898
-
SHA512
7aea6138b9c90996ccd2195a8429c4924af48670a71558d7ef31dd692a863d46cb67c6d0f18382c59edafa260e4cc1046a80e571ca90b3d6c1f19d63242b6306
-
SSDEEP
12288:U3jDvjxZzscjioWPlSi2k92KMlnN9vya+Bcs708tDVjKlMzL+k1A5xiMaqTq:6f7bYcjiHSi2k9Elnsn0aRMY+kWx5zTq
Malware Config
Signatures
Files
-
767b0e1737a4f3e79d45045d38cebf09b6df48304a62ca28802dd41d3010b898.exe windows x86
4aff08a1539d5f77b9ab28a5422f2076
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetVersion
GetTickCount
GetCommandLineA
ExitProcess
HeapAlloc
GetProcessHeap
GetOEMCP
VirtualAlloc
FindResourceA
VirtualFree
CreateProcessA
SizeofResource
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetEnvironmentStrings
GlobalAlloc
GetEnvironmentStringsW
GetSystemInfo
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
FindFirstFileW
CreateFileMappingA
GetDiskFreeSpaceA
GetProcAddress
DeleteFileW
DeleteFileA
GetFileSize
GetStartupInfoA
GetLastError
GetVersionExA
TlsAlloc
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
InterlockedIncrement
VirtualQuery
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
FormatMessageA
InterlockedDecrement
FindClose
GetEnvironmentVariableA
SetEvent
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
GetCPInfo
SetStdHandle
FreeEnvironmentStringsW
LoadLibraryExW
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
WaitForSingleObject
GetConsoleOutputCP
GetCurrentThread
GetModuleHandleA
LoadLibraryA
GetCurrentProcessId
gdi32
DeleteObject
SelectObject
CreateFontIndirectA
user32
GetFocus
SendMessageA
GetSysColor
GetDlgItem
SetWindowLongA
GetWindowRect
GetSystemMetrics
SetFocus
EndPaint
FillRect
CreateWindowExA
GetWindowLongA
EnableMenuItem
GetWindow
PeekMessageA
DestroyWindow
DestroyMenu
SetForegroundWindow
Sections
.text Size: 591KB - Virtual size: 914KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ