Static task
static1
Behavioral task
behavioral1
Sample
810f46872ccc4659d709fbcd10523e6b1896d97f00a866332a09e65fb3c325a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
810f46872ccc4659d709fbcd10523e6b1896d97f00a866332a09e65fb3c325a1.exe
Resource
win10v2004-20220901-en
General
-
Target
810f46872ccc4659d709fbcd10523e6b1896d97f00a866332a09e65fb3c325a1
-
Size
212KB
-
MD5
a0d0efafc5ee4f5a67b8ed686cd1f909
-
SHA1
0dd12a2d3b416c93f89b464fb989d0207b5ecdc4
-
SHA256
810f46872ccc4659d709fbcd10523e6b1896d97f00a866332a09e65fb3c325a1
-
SHA512
f0aa9c18d2e51869fe7e4e80075f1521a18d9ad14e86440bc278c5c97cc5c6ea6d3e7fd22fc2411a0f42ed925e2556c92c07b6e9fb309f966c529796e1b54d37
-
SSDEEP
3072:hmHNeZ9+Ujoh/8XNiLS3slD7S8FQKj4osuDHqsIscyYbj4CSqv0UZRTgfbzNFVXc:cotZiS8FQo/x/IEwjcqMUZ5CQ
Malware Config
Signatures
Files
-
810f46872ccc4659d709fbcd10523e6b1896d97f00a866332a09e65fb3c325a1.exe windows x86
a93d80ac5903151ef73165e37598b0fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
GetModuleHandleA
LockResource
LoadResource
FindResourceExA
PulseEvent
FreeResource
VirtualFree
LoadLibraryA
GetLastError
VirtualProtect
GetProcAddress
LocalAlloc
GlobalFree
WriteFile
CreateFileA
GlobalAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStringTypeW
GetVersion
CloseHandle
LoadLibraryW
Sleep
FreeLibrary
ExitProcess
GetCommandLineA
GetStartupInfoA
user32
RegisterClassExA
RegisterClassA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
GetDC
FillRect
ReleaseDC
UnregisterClassA
BringWindowToTop
AttachThreadInput
EndDialog
LoadStringA
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
gdi32
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetDIBits
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantInit
VariantClear
pdh
PdhConnectMachineA
PdhGetDataSourceTimeRangeA
PdhCollectQueryData
PdhGetCounterInfoA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 598KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE