Static task
static1
Behavioral task
behavioral1
Sample
a427005d6d892c104d4d334d920109c44e699aefafee6364392d6084c5d9ac01.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a427005d6d892c104d4d334d920109c44e699aefafee6364392d6084c5d9ac01.exe
Resource
win10v2004-20221111-en
General
-
Target
a427005d6d892c104d4d334d920109c44e699aefafee6364392d6084c5d9ac01
-
Size
166KB
-
MD5
48ac71e8324d5d2e77083ece81975268
-
SHA1
35377b2c27f4f46606392d2e6f11b946096bb9dc
-
SHA256
a427005d6d892c104d4d334d920109c44e699aefafee6364392d6084c5d9ac01
-
SHA512
3cff1c8c5c4a546380780e9895764ad6f1da9121eaf2f1f925882d05d7543a4ace498d5081e34427d0e1a4e7176c67c5d0304f8d17d4ff565ffee8eedd926637
-
SSDEEP
3072:whlTIOnxzJFXMsalXR3zhbIe2zsN82g3GtX2qgjVSxqtUrf3Y/8m+4McIdra:qx/XMPlzkIC3GtN6Sx9j3wMc
Malware Config
Signatures
Files
-
a427005d6d892c104d4d334d920109c44e699aefafee6364392d6084c5d9ac01.exe windows x86
9d88b577d7a3eb51e79b54a38c56351d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
OleCreateFontIndirect
SysAllocString
dmbabdbe
_Snan
_Getcvt
_Strcoll
_FDtest
_FXbig
_FSinh
_LXbig
_LRteps
_Strxfrm
ntdll
ZwOpenTimer
NtLockFile
NtOpenDirectoryObject
NtOpenEventPair
NtExtendSection
NtOpenEvent
NtQuerySemaphore
msvcrt
_onexit
_wtof
iswspace
__dllonexit
wcstol
_cexit
_unlock
_wtoi64
_initterm
_amsg_exit
user32
InflateRect
GetMessagePos
WindowFromPoint
PeekMessageW
IsMenu
SetDlgItemTextW
DefWindowProcW
MapDialogRect
GetFocus
GetWindowLongA
OffsetRect
CloseClipboard
SetCapture
ole32
ReleaseStgMedium
comctl32
ImageList_BeginDrag
kernel32
GetCurrentProcessId
GetProcessHeap
GetPriorityClass
MulDiv
GetProcessHeap
UnhandledExceptionFilter
GetQueuedCompletionStatus
FreeLibrary
Sleep
GlobalAlloc
CloseHandle
HeapSize
GetCurrentThreadId
GlobalAlloc
SleepEx
InterlockedExchangeAdd
FlushInstructionCache
GetLocaleInfoW
VirtualProtectEx
gdi32
CreateCompatibleDC
PatBlt
GetTextExtentPoint32W
shell32
SHCreateShellItem
advapi32
RegEnumKeyExW
gdiplus
GdipCreateFontFromDC
GdipCreateBitmapFromFile
GdipDisposeImageAttributes
GdipGetImageHeight
GdipDrawImageRectRectI
GdipScaleMatrix
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ