Static task
static1
Behavioral task
behavioral1
Sample
997f6c2db0c63004ced45b2f2196746d14a939703d2421a1b6407547485c716a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
997f6c2db0c63004ced45b2f2196746d14a939703d2421a1b6407547485c716a.exe
Resource
win10v2004-20221111-en
General
-
Target
997f6c2db0c63004ced45b2f2196746d14a939703d2421a1b6407547485c716a
-
Size
172KB
-
MD5
6f264062a19b3ccfc3ba8f9a4c36b934
-
SHA1
66f3862be4b8c7d14bac1d65614d03385a334793
-
SHA256
997f6c2db0c63004ced45b2f2196746d14a939703d2421a1b6407547485c716a
-
SHA512
91a6220a61f35a7c236f62e46994eb5d7ca7826508b2632e3e422ec2e566ee049855a2c22156a76ace8634a6af8fb2fa3adebb6b37f256bef7fc7f9e8d111abc
-
SSDEEP
3072:LhaubhotvA26Ck8+wSDVy2ppkG2T5zFqZ+Tuc+9CGAMq0AGa8cHes0:ThotHIwIAXG2xq9HFWHes0
Malware Config
Signatures
Files
-
997f6c2db0c63004ced45b2f2196746d14a939703d2421a1b6407547485c716a.exe windows x86
8f205fab088d98de7304856f44ee9cea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
FindFirstFileW
GetModuleHandleA
GetModuleHandleW
GetTempPathA
CloseHandle
GetFileType
CreateFileW
CreateFileA
GetBinaryTypeW
GetBinaryTypeA
FindClose
GetTempPathW
GetStartupInfoA
user32
CloseWindow
DefWindowProcW
CloseClipboard
DrawTextW
GetWindowTextA
ShowWindow
DrawTextA
GetWindowTextW
IsWindowEnabled
GetWindow
IsWindowVisible
EnableWindow
GetWindowRect
DefWindowProcA
DeleteMenu
DestroyWindow
ReleaseDC
GetClipboardData
EmptyClipboard
BeginPaint
gdi32
FillRgn
CreateSolidBrush
CombineRgn
DeleteObject
GetDeviceCaps
CreateCompatibleDC
CreatePolygonRgn
CreateFontIndirectW
CreateFontIndirectA
CreateRectRgn
CreateRoundRectRgn
GetStockObject
FrameRgn
BitBlt
CreateCompatibleBitmap
oleaut32
GetErrorInfo
SafeArrayCreate
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SetErrorInfo
CreateErrorInfo
SafeArrayCopy
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ