Static task
static1
Behavioral task
behavioral1
Sample
95b24952ff85c9459daf12fdd96a8c54cbb86979a77204e31a39e5510c8c20ff.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
95b24952ff85c9459daf12fdd96a8c54cbb86979a77204e31a39e5510c8c20ff.exe
Resource
win10v2004-20220812-en
General
-
Target
95b24952ff85c9459daf12fdd96a8c54cbb86979a77204e31a39e5510c8c20ff
-
Size
252KB
-
MD5
7a919fa19333143b400d6bd68634c272
-
SHA1
70908f2275e9cbeb5c427160b1fe597554310f2c
-
SHA256
95b24952ff85c9459daf12fdd96a8c54cbb86979a77204e31a39e5510c8c20ff
-
SHA512
625e64a3094957ed835ddbfe21e07b357f0763249509b152d927513685fe3df7783c9ad009ad6cb784b62cddacb1052325fc024f1b01bc36a26581449383fd0b
-
SSDEEP
6144:MaR5B4GctdZy6pAp+0dTmQlJZy6pAp+0dTmQl:MaR5B4Tt7ymP4VdymP4V
Malware Config
Signatures
Files
-
95b24952ff85c9459daf12fdd96a8c54cbb86979a77204e31a39e5510c8c20ff.exe windows x86
984132fbe2305e1cc911972702718ccd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
CreateProcessA
LocalAlloc
LocalFree
lstrcatA
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
GetCurrentProcess
CreateFileA
WriteFile
lstrlenA
lstrcmpiA
GetTickCount
WaitForMultipleObjects
CloseHandle
SetEvent
SearchPathA
lstrcmpA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
ExitProcess
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualProtect
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
lstrcpyA
HeapDestroy
GetStartupInfoA
GetProcessHeap
GetCommandLineA
WaitForSingleObject
GetLocaleInfoA
CreateMutexA
GetLastError
GetVersionExA
Sleep
CreateEventA
CreateThread
WinExec
HeapAlloc
HeapFree
RtlUnwind
InterlockedExchange
GetCPInfo
GetOEMCP
GetStringTypeA
GetFileType
GetACP
LoadLibraryA
GetStringTypeW
user32
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
LoadStringA
GetDesktopWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
SendMessageA
GetClassNameA
GetWindow
LoadImageA
DefWindowProcA
SetForegroundWindow
PostMessageA
PostQuitMessage
DestroyMenu
TrackPopupMenu
GetCursorPos
InsertMenuItemA
CreatePopupMenu
ReleaseDC
CharUpperA
GetSysColor
SystemParametersInfoA
GetDC
GetMenuCheckMarkDimensions
gdi32
MoveToEx
SetTextColor
GetTextExtentPoint32A
SelectObject
CreateFontIndirectA
ExtTextOutA
SetTextAlign
GetTextAlign
SetBkMode
GetBkMode
DeleteObject
GetTextColor
Rectangle
CreateBrushIndirect
LineTo
CreatePen
DeleteDC
BitBlt
CreateCompatibleDC
advapi32
RegEnumKeyA
RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
shell32
Shell_NotifyIconA
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
winmm
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerGetNumDevs
mixerGetID
mixerOpen
mixerClose
mixerGetDevCapsA
hid
HidD_GetHidGuid
HidP_GetCaps
HidD_GetAttributes
HidD_GetPreparsedData
HidD_FreePreparsedData
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lU� Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE