Static task
static1
Behavioral task
behavioral1
Sample
840ab231894e0c0458aca5f6e954e158f8f7b26d437e0bf31e9223f1b23d5740.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
840ab231894e0c0458aca5f6e954e158f8f7b26d437e0bf31e9223f1b23d5740.exe
Resource
win10v2004-20220812-en
General
-
Target
840ab231894e0c0458aca5f6e954e158f8f7b26d437e0bf31e9223f1b23d5740
-
Size
148KB
-
MD5
43ea829ee24c4f92762c29cbb3237576
-
SHA1
7f3c0257dd26d67d4e70c4e23e0a76e036da83c1
-
SHA256
840ab231894e0c0458aca5f6e954e158f8f7b26d437e0bf31e9223f1b23d5740
-
SHA512
83ff1513ef09cbff30d47edf8bbe9240974edecd60a57ccafe71e4541c78845179a39493b8f56b15f231d0074420ff2761e4de289325e17cf3d3df911c75e8cc
-
SSDEEP
3072:flzxaRuB1muzMZA3OAAJfGZKqT+ewwu4mcqcYtAVtJbwTjaO0jfO:9lmvSOBZ/7inJbw3D0b
Malware Config
Signatures
Files
-
840ab231894e0c0458aca5f6e954e158f8f7b26d437e0bf31e9223f1b23d5740.exe windows x86
7b8876624f2348d3a3c8e013aaa3ab28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedDecrement
VirtualProtect
GetModuleHandleA
GlobalLock
GetACP
GetStartupInfoA
InterlockedCompareExchange
OpenProcess
GetCurrentDirectoryA
user32
GetSysColor
SystemParametersInfoA
RedrawWindow
ScreenToClient
SendMessageA
LoadStringA
KillTimer
GetWindowThreadProcessId
msvcrt
log10
ceil
_itoa
__badioinfo
_initterm
iswdigit
_adjust_fdiv
iswspace
__p__commode
_except_handler3
_dup2
__setusermatherr
_acmdln
__getmainargs
strerror
_XcptFilter
exit
__set_app_type
_filbuf
__p__fmode
oleaut32
LoadTypeLib
SafeArrayPutElement
SafeArrayGetElement
SysStringByteLen
SafeArrayPtrOfIndex
SysAllocStringLen
SysFreeString
SafeArrayUnaccessData
comctl32
ImageList_GetBkColor
ImageList_GetIcon
ImageList_DragShowNolock
CreateToolbarEx
InitCommonControlsEx
ImageList_SetDragCursorImage
ImageList_GetImageCount
ole32
CreateBindCtx
OleIsCurrentClipboard
IsAccelerator
CoLoadLibrary
CoCreateInstance
CoRegisterMessageFilter
CoInitialize
advapi32
GetLengthSid
OpenProcessToken
RegQueryValueA
InitializeSecurityDescriptor
GetTokenInformation
OpenThreadToken
FreeSid
RegEnumKeyW
OpenSCManagerA
CheckTokenMembership
shell32
ExtractIconExA
SHGetDiskFreeSpaceExW
DragQueryFileW
SHGetFileInfoA
ExtractIconA
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHCreateDirectoryExA
DragFinish
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE