Static task
static1
Behavioral task
behavioral1
Sample
70403e7c89d1ac0e958ce91ab87ff82c42efe0709ffa553c9258bf4c31dbea66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70403e7c89d1ac0e958ce91ab87ff82c42efe0709ffa553c9258bf4c31dbea66.exe
Resource
win10v2004-20220812-en
General
-
Target
70403e7c89d1ac0e958ce91ab87ff82c42efe0709ffa553c9258bf4c31dbea66
-
Size
272KB
-
MD5
2a52026e9d2909c1216b2849e657c950
-
SHA1
a6f9d2736ad5af141f9114e7b1522d7ab7af3f50
-
SHA256
70403e7c89d1ac0e958ce91ab87ff82c42efe0709ffa553c9258bf4c31dbea66
-
SHA512
dcf2fe34a4a0d5d32cd3d2e401281480ea1cbadedd1bc096172a8c8382befe23af83572baa91373b4b2aac8cdbc6979263e531a534ae5b8dfbe386a9e8f54633
-
SSDEEP
6144:GaW9PtbZPad5ZkuAc5ccgk3PfcKrKywvjSsQLH5Adu:GJxtg5tdGykjSsPdu
Malware Config
Signatures
Files
-
70403e7c89d1ac0e958ce91ab87ff82c42efe0709ffa553c9258bf4c31dbea66.exe windows x86
a3d61fbeacbea4015766311f689397e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetLastError
CreateProcessW
CopyFileW
GetPrivateProfileStringW
FindClose
FindFirstFileW
CreateFileW
Sleep
OpenProcess
GetModuleFileNameW
GetModuleHandleW
CompareStringA
LocalFree
WaitForSingleObject
CreateFileA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LCMapStringW
LCMapStringA
GetDriveTypeA
MultiByteToWideChar
GetTimeZoneInformation
InitializeCriticalSection
SetEndOfFile
CloseHandle
LoadLibraryA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
SetFileAttributesW
GetFileAttributesW
DeleteFileW
GetDriveTypeW
CreateDirectoryW
GetFileAttributesA
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
ExitThread
GetCurrentThreadId
CreateThread
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualAlloc
HeapReAlloc
GetFullPathNameW
GetCurrentDirectoryA
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetEnvironmentVariableA
RaiseException
HeapSize
SetFilePointer
FlushFileBuffers
CompareStringW
user32
ScreenToClient
DialogBoxParamW
EndDialog
SetWindowTextW
LoadIconW
GetDC
DrawTextW
GetClientRect
SendMessageW
GetParent
ReleaseDC
SetTimer
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
GetDlgItem
gdi32
SelectObject
wsock32
ntohl
comctl32
InitCommonControlsEx
shell32
ShellExecuteExW
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ