Static task
static1
Behavioral task
behavioral1
Sample
d600e20fc8da09d14b581a4846840b6403fc8924a2fecaf12d89c46ef3df17c2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d600e20fc8da09d14b581a4846840b6403fc8924a2fecaf12d89c46ef3df17c2.exe
Resource
win10v2004-20221111-en
General
-
Target
d600e20fc8da09d14b581a4846840b6403fc8924a2fecaf12d89c46ef3df17c2
-
Size
312KB
-
MD5
c72b54226e685ce56d0d03ff64876b77
-
SHA1
411fa286618b3001b8340644a9aed27a888c20d9
-
SHA256
d600e20fc8da09d14b581a4846840b6403fc8924a2fecaf12d89c46ef3df17c2
-
SHA512
6c802514e684a5753bba48e25da471869d5c9a1c94d779420d959d32ba34dc8e51055d715c91efc26ef46d2b6f8a8833632909373f4320e97f24ee4ff302f3e6
-
SSDEEP
6144:x4XO3tHBLxJB8v6fSR3Oh5WG9NWS1qz53mpRpPLMrQEu3w9T3nTPunnBY:xYOdhLb28hbNW2UwjtIQazunW
Malware Config
Signatures
Files
-
d600e20fc8da09d14b581a4846840b6403fc8924a2fecaf12d89c46ef3df17c2.exe windows x86
9e096d9a8e586f8815cc15db9e772d43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
GetDeviceCaps
DeleteObject
BitBlt
SetTextColor
kernel32
GetOEMCP
VirtualAlloc
Sleep
VirtualFree
WriteFile
HeapCreate
IsValidCodePage
SizeofResource
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetModuleFileNameA
WaitForMultipleObjects
FindFirstFileW
ResetEvent
CompareStringA
FindFirstFileA
GetProcessHeap
GetProcAddress
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GetConsoleMode
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
RemoveDirectoryA
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
SetEvent
HeapReAlloc
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
GetCPInfo
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
GetLocalTime
GetFileAttributesW
HeapDestroy
FindNextFileA
LockResource
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetVersion
ole32
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
user32
PostMessageA
SetFocus
EndPaint
FillRect
SetTimer
GetSubMenu
RegisterClassA
EnableMenuItem
IsWindowEnabled
SetWindowPos
EndDialog
ShowWindow
UpdateWindow
GetMessageA
DestroyWindow
GetClientRect
TranslateMessage
ReleaseDC
GetCursorPos
GetDC
DispatchMessageA
IsWindow
PostQuitMessage
DestroyMenu
GetDlgItem
ClientToScreen
GetDesktopWindow
SetDlgItemTextA
MoveWindow
MessageBoxA
GetSysColor
IsWindowVisible
InvalidateRect
SendMessageA
SetCursor
EnableWindow
msvcrt
_strcmpi
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ