Static task
static1
Behavioral task
behavioral1
Sample
94c62df137810d7df4245a9491a8b87277bf2f1796e9fd63cfaf5de08726bbb3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
94c62df137810d7df4245a9491a8b87277bf2f1796e9fd63cfaf5de08726bbb3.exe
Resource
win10v2004-20221111-en
General
-
Target
94c62df137810d7df4245a9491a8b87277bf2f1796e9fd63cfaf5de08726bbb3
-
Size
770KB
-
MD5
0d6fc3a77fa021c1e0e952b041b236b0
-
SHA1
9fb28676116abb6f7cbf614631adf30ba12be4a3
-
SHA256
94c62df137810d7df4245a9491a8b87277bf2f1796e9fd63cfaf5de08726bbb3
-
SHA512
63e9590f371eda7671db50b3c4365e6e9c5cab21e7db4429040aad87527fc5d5da58937f6f4fb11b19a6090e911dc487cc1d12e2e2a3a9260628a56608ff8420
-
SSDEEP
24576:FSlSlSlSpy/llxY0ZFRJe/aL67J283HSlSlSlSlS0ddd:03RE/v3
Malware Config
Signatures
Files
-
94c62df137810d7df4245a9491a8b87277bf2f1796e9fd63cfaf5de08726bbb3.exe windows x86
e0a8be8e2f630a190f4eae7582ddb757
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetCurrentProcessId
CreateFileA
TlsSetValue
GetFileType
Sleep
InterlockedDecrement
FindClose
VirtualFree
LoadResource
GetOEMCP
GetModuleHandleW
GetStringTypeW
GetACP
GetSystemTimeAsFileTime
ReadFile
GetModuleHandleA
GetStringTypeA
RaiseException
GetProcessHeap
WaitForMultipleObjects
HeapSize
MultiByteToWideChar
UnhandledExceptionFilter
GetCommandLineW
LocalAlloc
GetConsoleMode
CreateEventA
GetEnvironmentStrings
GetCurrentProcess
GetFileSize
LoadLibraryA
DeleteFileA
GetModuleFileNameA
GlobalUnlock
GetTickCount
QueryPerformanceCounter
FreeLibrary
WaitForSingleObject
GlobalFree
LCMapStringW
EnterCriticalSection
HeapFree
GetLastError
HeapAlloc
GetStartupInfoA
user32
ScreenToClient
PostQuitMessage
SetWindowPos
GetParent
SetWindowLongA
EnableWindow
LoadStringA
PostMessageA
GetWindowLongA
GetSysColor
GetDC
GetSubMenu
IsWindowVisible
SetForegroundWindow
GetClientRect
SetTimer
LoadIconA
FillRect
DispatchMessageA
EndDialog
DestroyWindow
SetCursor
msvcrt
_strcmpi
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 686KB - Virtual size: 686KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ