Static task
static1
Behavioral task
behavioral1
Sample
96aa28b95491bec0a72de37f490b150b42ef42339b1436743d91c808e0b1d0d8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
96aa28b95491bec0a72de37f490b150b42ef42339b1436743d91c808e0b1d0d8.exe
Resource
win10v2004-20220812-en
General
-
Target
96aa28b95491bec0a72de37f490b150b42ef42339b1436743d91c808e0b1d0d8
-
Size
296KB
-
MD5
f080cb0827d456ba75bbecc5154918dc
-
SHA1
b2ec0341012d40c1413d9501803424f146b7187c
-
SHA256
96aa28b95491bec0a72de37f490b150b42ef42339b1436743d91c808e0b1d0d8
-
SHA512
308b790e6aa4b2b2f6a4e3c84f76ad00692d64dd8a7de5a70966ddd4cd131c2d4a54f1c107b5975fddafba3781c65d1ed82d17ab1d51d982501be1e7a8396bbf
-
SSDEEP
6144:xdzdN2zwILJdHGMNX0H5rYBSavijyO+ZDxOlv1:Xzy0cXmMNX25cBZviQa
Malware Config
Signatures
Files
-
96aa28b95491bec0a72de37f490b150b42ef42339b1436743d91c808e0b1d0d8.exe windows x86
9b44125e7d33621b3fb193df769be52d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
FreeLibrary
GetProcAddress
GetProcessHeap
HeapAlloc
SetThreadPriority
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualProtect
GlobalLock
GetUserDefaultLangID
FindNextChangeNotification
GetCurrentThread
InterlockedIncrement
GetVersion
SetEndOfFile
SuspendThread
ResetEvent
CreateEventW
SetLastError
CreateWaitableTimerW
VirtualFree
GetDriveTypeW
GetFileAttributesExW
FindNextFileW
GetLocalTime
ReadFile
MulDiv
FindClose
GlobalFree
HeapFree
GetPrivateProfileStringW
user32
LoadIconW
AppendMenuW
PostQuitMessage
OffsetRect
GetWindowTextW
SetCursorPos
SendDlgItemMessageW
wsprintfW
DestroyMenu
EnableWindow
CreatePopupMenu
MessageBoxW
ReleaseCapture
SystemParametersInfoW
EndDialog
InvalidateRect
DispatchMessageW
LoadCursorW
SetForegroundWindow
SetLayeredWindowAttributes
DefWindowProcW
DrawTextW
gdi32
Rectangle
DPtoLP
GetClipBox
MoveToEx
GetObjectW
CreateDCW
SetBkMode
SetDIBits
CreateCompatibleBitmap
CreatePen
StretchBlt
CreateRoundRectRgn
GetDeviceCaps
SetMapMode
CreateCompatibleDC
GetMapMode
advapi32
RegQueryValueExW
LookupPrivilegeValueW
RegCreateKeyExW
RegSetValueExW
LookupAccountSidW
shell32
SHChangeNotify
ole32
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize
Sections
.text Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE