Static task
static1
Behavioral task
behavioral1
Sample
f18ce1f25f684b0381604aeb44356b8314803716071b7086b33d89dc6c8b59d8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f18ce1f25f684b0381604aeb44356b8314803716071b7086b33d89dc6c8b59d8.exe
Resource
win10v2004-20220812-en
General
-
Target
f18ce1f25f684b0381604aeb44356b8314803716071b7086b33d89dc6c8b59d8
-
Size
2.2MB
-
MD5
a00b5e34940fa60634afb686ab92d6ff
-
SHA1
9a704bc3198d0c91344d07c64ef3038e8bde7e9f
-
SHA256
f18ce1f25f684b0381604aeb44356b8314803716071b7086b33d89dc6c8b59d8
-
SHA512
82a97ee555bba549c9ef76deb9f2d4ac797902515ee0fdfa1bbe2f2e222dc1233921b800726e217cc734a4a108c070147d778fc56bb1eb8a152c339dcb48773b
-
SSDEEP
49152:hs2AYsiLltVUinpkMMMMMMMMMMMMMMMMMMZbYl2yDNLhfaMYzChZKwC:T36PMMMMMMMMMMMMMMMMMMZe221hyMpK
Malware Config
Signatures
Files
-
f18ce1f25f684b0381604aeb44356b8314803716071b7086b33d89dc6c8b59d8.exe windows x86
7549e25888c91176f99e3aaab520b42e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
VirtualAllocEx
HeapSize
IsSystemResumeAutomatic
lstrcpyA
RtlMoveMemory
SetDllDirectoryA
ReleaseSemaphore
GetFileSize
RemoveDirectoryA
CreateNamedPipeA
SetConsoleTextAttribute
LockFileEx
GetDllDirectoryA
GetSystemWindowsDirectoryA
GlobalFix
lstrcmpA
GetEnvironmentVariableA
OpenJobObjectA
CreateProcessA
GetBinaryTypeA
SetFilePointer
PulseEvent
WriteConsoleOutputCharacterA
GetDiskFreeSpaceA
GetCurrentConsoleFont
GetNumberOfConsoleFonts
LoadLibraryExA
FindVolumeMountPointClose
GetProfileStringA
WriteConsoleOutputCharacterA
lstrlenA
GetLastError
WriteFileEx
WritePrivateProfileStringA
ExpandEnvironmentStringsA
GetCurrentDirectoryA
EnumResourceNamesA
GetConsoleAliasExesW
HeapSize
ReleaseMutex
OpenEventA
ClearCommBreak
ConnectNamedPipe
dpmodemx
SPInit
advapi32
CredFree
user32
CharUpperBuffA
OemToCharBuffA
IsCharUpperA
SetMenuContextHelpId
IsDialogMessageA
CreateDesktopA
GetListBoxInfo
GetMenuCheckMarkDimensions
GetKeyboardLayout
GetClassWord
IsCharUpperA
DispatchMessageA
GetUserObjectSecurity
SwitchToThisWindow
GetWindow
ToAscii
GetWindowRgnBox
UpdateLayeredWindow
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 636KB - Virtual size: 989KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 331KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ