Static task
static1
Behavioral task
behavioral1
Sample
2391b29c0cbd8ce3e91e5b525a6822669c594a758991d5e02b253db492826b25.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2391b29c0cbd8ce3e91e5b525a6822669c594a758991d5e02b253db492826b25.exe
Resource
win10v2004-20220812-en
General
-
Target
2391b29c0cbd8ce3e91e5b525a6822669c594a758991d5e02b253db492826b25
-
Size
72KB
-
MD5
eacbd5a512ccc7d6abd8ac230dc29bfc
-
SHA1
7faf92b63ed6d15671c678de46872e2b48d4f891
-
SHA256
2391b29c0cbd8ce3e91e5b525a6822669c594a758991d5e02b253db492826b25
-
SHA512
76a16673543c2e5e65307af20251e03f15a6870814bd9d180355bc98a885ac61c892cee7f049ad7d883f0b3a78e9781c0f9f35923e2fa6af4b720eafb74e1d06
-
SSDEEP
1536:NzFVRv7U5Vk7EWYUUD90STKFL3IDkMmxftM1UsStf3F5aj8Geq:jDv7CC7E2UD9TT8rIUxfU5StfE5
Malware Config
Signatures
Files
-
2391b29c0cbd8ce3e91e5b525a6822669c594a758991d5e02b253db492826b25.exe windows x86
56e9b930fa1c167c1e80d27aefd1849f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
OpenFile
DeleteFileA
GetCommandLineA
ExitThread
CopyFileW
FindFirstFileA
SetLastError
CreateThread
WriteFile
OpenFileMappingA
DeleteFileW
GetLastError
ReadConsoleA
Sleep
DeleteAtom
CopyFileExA
GetStdHandle
CopyFileA
GetComputerNameA
user32
DrawIcon
GetDC
DrawTextW
DrawTextA
IsWindow
BlockInput
LoadMenuA
GetFocus
CloseWindow
DialogBoxParamW
AppendMenuA
InsertMenuA
CopyImage
GetWindowTextA
IsMenu
EndDialog
GetCursor
CreateIcon
GetWindowTextLengthA
GetMenu
advapi32
RegDeleteValueW
RegQueryInfoKeyW
RegQueryValueExA
RegCreateKeyW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegDeleteKeyA
RegLoadKeyW
RegLoadKeyA
RegEnumKeyW
RegOpenKeyA
RegGetKeySecurity
RegOpenKeyW
RegReplaceKeyW
RegEnumKeyExW
RegOpenKeyExA
gdi32
AddFontResourceExW
AddFontResourceExA
CancelDC
AddFontResourceTracking
GetPixel
CloseFigure
GetBrushOrgEx
ClearBrushAttributes
CopyMetaFileA
SetTextColor
AddFontResourceA
GetDCOrgEx
AbortPath
AddFontMemResourceEx
BeginPath
AddFontResourceW
RestoreDC
comctl32
ImageList_LoadImageW
ImageList_GetIcon
ImageList_LoadImage
ImageList_BeginDrag
ImageList_DragEnter
ImageList_AddIcon
ImageList_LoadImageA
ImageList_AddMasked
ImageList_Remove
ImageList_GetIconSize
ImageList_Create
ImageList_Read
ImageList_Copy
ImageList_Merge
ImageList_DrawEx
ImageList_DragMove
ImageList_DragShowNolock
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ