Static task
static1
Behavioral task
behavioral1
Sample
33336abb430f57f0d193e8387329c313d690a7d8de62032d11078a5565f4d6d4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
33336abb430f57f0d193e8387329c313d690a7d8de62032d11078a5565f4d6d4.exe
Resource
win10v2004-20220812-en
General
-
Target
33336abb430f57f0d193e8387329c313d690a7d8de62032d11078a5565f4d6d4
-
Size
248KB
-
MD5
3874bd96abac76c6bee8124ebe64f041
-
SHA1
61ae06c3715f7c1af29b32c0cbcf3bf860df2238
-
SHA256
33336abb430f57f0d193e8387329c313d690a7d8de62032d11078a5565f4d6d4
-
SHA512
9562f3f939f7e88a43212212251725a2b0e50297234e15cce684d6a366ed8a2ba6a5554cf3be69714ca834b906e283176a7aecfe8a24f3b9ae1a599647ad655a
-
SSDEEP
3072:F2OemzGfHjvL2z4PMsJrmTguNGGVNzgg+UTDdhfGGy+H+U9ABylfz/Cr8IxG8A5c:F2ODzGfDvL2E0sJMguNxgrG9l9SXxd
Malware Config
Signatures
Files
-
33336abb430f57f0d193e8387329c313d690a7d8de62032d11078a5565f4d6d4.exe windows x86
7dfb0340ce2ea2fb0517a0d33560f132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LocalReAlloc
lstrlenA
SetFilePointer
ReadFile
VirtualFree
MoveFileA
VirtualAllocEx
LoadLibraryExA
GetCommandLineA
lstrcpyA
RaiseException
ExitProcess
ExitThread
SetThreadLocale
SetHandleCount
WriteFile
GetVersionExA
SizeofResource
IsBadReadPtr
WaitForSingleObject
SetLastError
VirtualAlloc
IsBadHugeReadPtr
MoveFileExA
GetCommandLineW
LocalFree
GetProcAddress
MulDiv
lstrcatA
lstrcmpA
lstrcmpiA
user32
GetKeyboardType
GetMenuItemID
GetKeyboardLayoutNameA
GetWindowLongA
GetMessagePos
GetSystemMenu
GetDC
InflateRect
GetMenuStringA
IsWindow
GetKeyNameTextA
GetClientRect
GetClassNameA
GetFocus
GetWindowRect
IsZoomed
IsChild
GetDlgItem
GetWindowThreadProcessId
GetCursor
IsWindowVisible
GetForegroundWindow
IsIconic
GetScrollInfo
GetTopWindow
GetDCEx
gdi32
CopyEnhMetaFileA
CreateBitmap
BitBlt
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES40 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES45 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES11 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES77 Size: 512B - Virtual size: 185B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES04 Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES59 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES63 Size: 512B - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES21 Size: 512B - Virtual size: 259B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ