Static task
static1
Behavioral task
behavioral1
Sample
f0c127f203b99c18bd103975e1c3e7e0f6a8d53a32a8b095e65524e2fcfc5e6a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f0c127f203b99c18bd103975e1c3e7e0f6a8d53a32a8b095e65524e2fcfc5e6a.exe
Resource
win10v2004-20220901-en
General
-
Target
f0c127f203b99c18bd103975e1c3e7e0f6a8d53a32a8b095e65524e2fcfc5e6a
-
Size
5.2MB
-
MD5
6246a2c01027379f306c4a2a3c99c0b8
-
SHA1
29f491b012766a0fd1f7c02797fc5a1967d07da7
-
SHA256
f0c127f203b99c18bd103975e1c3e7e0f6a8d53a32a8b095e65524e2fcfc5e6a
-
SHA512
65c30ee5d9b952cb1907397dcf40b8611e4781b9b6f52e1e60d4d4580beb6984a9d25d6f0b85fb079a5108da6709b460f213f7f9d55cf0bf823b167e20623173
-
SSDEEP
98304:ZPZM5CrJ0zPL0EnnwmGeDei7I8kWXO91xl3RyHkATc+eo:UGJWYKDv/gh39w
Malware Config
Signatures
Files
-
f0c127f203b99c18bd103975e1c3e7e0f6a8d53a32a8b095e65524e2fcfc5e6a.exe windows x86
f64d4ddbb702b2a179516fb73b2d0297
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
WaitForSingleObject
GetModuleFileNameW
GetCurrentProcess
TerminateProcess
VirtualFree
ResetEvent
ExitProcess
GetLastError
CreateEventW
GetCPInfo
GetTickCount
InterlockedCompareExchange
GetModuleHandleA
OutputDebugStringA
lstrlenW
SetHandleCount
EnterCriticalSection
CreateEventA
CloseHandle
SetConsoleCP
HeapCreate
AddAtomA
VirtualQuery
OpenEventA
_lopen
TlsFree
user32
PostQuitMessage
DrawTextW
GetSubMenu
GetCursorPos
EndPaint
ReleaseCapture
RegisterWindowMessageW
GetDC
SetForegroundWindow
UnregisterClassA
RegisterClassW
TranslateMessage
UpdateWindow
EnableWindow
GetWindowLongW
GetKeyState
MoveWindow
GetForegroundWindow
gdi32
SetBkMode
GetNearestColor
ExcludeClipRect
CreateFontA
SetWindowOrgEx
advapi32
RegEnumValueA
RegOpenKeyA
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ