Static task
static1
Behavioral task
behavioral1
Sample
041799dfacf11c1406cf888d781ea3f3fce77a98dc6f9d10f7092729fd9e748b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
041799dfacf11c1406cf888d781ea3f3fce77a98dc6f9d10f7092729fd9e748b.exe
Resource
win10v2004-20220812-en
General
-
Target
041799dfacf11c1406cf888d781ea3f3fce77a98dc6f9d10f7092729fd9e748b
-
Size
223KB
-
MD5
cf2a7fd04864190cc3140384c09dd06d
-
SHA1
88c2bf7fadef504f906effc5b623a97e7a857921
-
SHA256
041799dfacf11c1406cf888d781ea3f3fce77a98dc6f9d10f7092729fd9e748b
-
SHA512
641f4a908fa7341c076d03030b2739836240adeb027e9a2a49ed39835bb35646690c76f6151a76e51ef2441a7fd3c0bdf2b63b3b6d9c3d4706d487c26ac73c5b
-
SSDEEP
3072:/aUFqSONeirOqKthW8BNHY4HlhYYP6UBJ499qfzdGCkjuUQ9kACbLI5+2:zqSONeiKtztY4DYYP6MzdGCUY+M5+2
Malware Config
Signatures
Files
-
041799dfacf11c1406cf888d781ea3f3fce77a98dc6f9d10f7092729fd9e748b.exe windows x86
3a8cccafa637a8832017dde2ecd73567
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DoEnvironmentSubstA
imm32
ImmGetCandidateListCountA
ImmAssociateContextEx
ImmSetConversionStatus
msvcrt
isspace
isxdigit
_time64
wcschr
toupper
_mbctoupper
shlwapi
PathIsDirectoryEmptyA
ChrCmpIA
ord10
PathParseIconLocationA
kernel32
FreeLibrary
InterlockedExchange
GetLastError
LoadLibraryA
GetProcAddress
LocalAlloc
lstrlenA
MoveFileW
OpenSemaphoreA
GetCompressedFileSizeA
RaiseException
user32
CreateDesktopW
LockWindowUpdate
IsCharAlphaNumericW
RegisterHotKey
UnhookWindowsHookEx
DefMDIChildProcW
gdi32
GetBkMode
CombineRgn
advapi32
GetLocalManagedApplications
StopTraceA
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Haze Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Waveuke Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Peck Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Rook Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
midmy Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Case Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Caphin Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Nipa Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Jinxpix Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Libsbal Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Barbnap Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Kaysnap Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
nanjo Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Dovehat Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Meltall Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Sall Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Vendash Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Mono Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Trop Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Innsfix Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Asea Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Skee Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Bust Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Osarwig Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Whopmud Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
goyem Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Thirdom Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Blocis Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Sluemow Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Kakialb Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Cowy Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Cavewok Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Staw Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
ridye Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Millod Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Jambif Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Peanbe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Tawsox Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
yepam Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
upomm Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
hipal Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
cwmmy Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Willone Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Hapshep Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Tiesay Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Junk Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Selloh Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
Ruedhie Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ
.dbg0 Size: 512B - Virtual size: 58B
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ