Static task
static1
Behavioral task
behavioral1
Sample
a677739d1602f6715683de8c096cb354641aa2982d2244e99d05af92be3eb4f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a677739d1602f6715683de8c096cb354641aa2982d2244e99d05af92be3eb4f9.exe
Resource
win10v2004-20220901-en
General
-
Target
a677739d1602f6715683de8c096cb354641aa2982d2244e99d05af92be3eb4f9
-
Size
97KB
-
MD5
c32afece3476f8ae235eb4340acad7e2
-
SHA1
040459c8627f3c4897dde5ef240415afcde5e547
-
SHA256
a677739d1602f6715683de8c096cb354641aa2982d2244e99d05af92be3eb4f9
-
SHA512
cddc5f55b681b939680d77e785e848773fa35e1b4eaa3c8fbc8893b8448dd36d173959089687849c864729474864cf3cfb3783c77c0404b1c236deb1cbf074de
-
SSDEEP
1536:UuBlVHRtZrBKe+bQlmTC73/B3MfZCCQ2wmzcctiLR9LGD:UuBllRBoQlmzZCCZFzcctidU
Malware Config
Signatures
Files
-
a677739d1602f6715683de8c096cb354641aa2982d2244e99d05af92be3eb4f9.exe windows x86
116bff91a32521aff57fe571a7278a76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
lstrlenA
lstrcpyA
SetEvent
LoadLibraryExA
GetEnvironmentStrings
Sleep
ExitProcess
ExitThread
LoadLibraryA
GetModuleHandleA
EnumCalendarInfoA
MoveFileExA
GetVersion
VirtualFree
WaitForSingleObject
GetACP
HeapDestroy
GetLocalTime
GetLastError
GetStartupInfoA
HeapFree
VirtualAlloc
version
VerFindFileA
shlwapi
PathGetCharTypeA
SHGetValueA
SHEnumValueA
gdi32
GetDCOrgEx
msvcrt
wcstol
mbstowcs
swprintf
tolower
calloc
sqrt
fabs
abs
memcpy
strcmp
malloc
strlen
memmove
sprintf
rand
log
srand
user32
CreateWindowExA
CheckMenuItem
GetLastActivePopup
CallWindowProcA
GetClientRect
EnumThreadWindows
CharToOemA
DrawIconEx
GetClassLongA
GetActiveWindow
GetMenuItemInfoA
DefMDIChildProcA
DrawFrameControl
CharNextA
MessageBoxA
GetMenuItemID
EqualRect
IsWindowVisible
SetWindowTextA
SystemParametersInfoA
SetWindowPos
IsWindowEnabled
GetSysColor
CallNextHookEx
FrameRect
GetMenu
GetCapture
Sections
text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ