?ahzkkrR_Z@@UGPAGPANM@Z
Static task
static1
Behavioral task
behavioral1
Sample
f25eff2487a4fbe9601f1d3bdd58a8c9a67f3c88e060c3ebfdc659479372f370.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f25eff2487a4fbe9601f1d3bdd58a8c9a67f3c88e060c3ebfdc659479372f370.exe
Resource
win10v2004-20220901-en
General
-
Target
f25eff2487a4fbe9601f1d3bdd58a8c9a67f3c88e060c3ebfdc659479372f370
-
Size
138KB
-
MD5
fe4a5e0eebd1d2b52337b5a967059f46
-
SHA1
aac02f77af2249fe412fc2f178398f9ef8d6eeb9
-
SHA256
f25eff2487a4fbe9601f1d3bdd58a8c9a67f3c88e060c3ebfdc659479372f370
-
SHA512
e919359d0177628ab4d902e09206825a0fd320fab6a56438393ec330ff2b592f8fe4a8d3e203d2afbff030520eb3597f4b1443baaf45fa5bcdd1e913e12ccd82
-
SSDEEP
3072:TipVufIp4owaxmMwGT4m1X2sWPwij1TUQQzpUyF85ly1YgDPyiz:TOVYncn1hKyQXM85lCYgOiz
Malware Config
Signatures
Files
-
f25eff2487a4fbe9601f1d3bdd58a8c9a67f3c88e060c3ebfdc659479372f370.exe windows x86
a714feda0a73bc2c19d840c4fc4fdb21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrTrimA
kernel32
FindNextFileA
CreateNamedPipeA
GetComputerNameW
lstrcmpA
SetCommState
GetTickCount
WaitForSingleObjectEx
InitializeCriticalSection
FoldStringW
CopyFileA
GetSystemDirectoryW
SetThreadExecutionState
GetFileType
SetHandleCount
msvcrt
exit
user32
SwitchToThisWindow
GetDCEx
GetMenuItemInfoW
ToUnicodeEx
CharNextExA
SetTimer
GetLastActivePopup
LoadStringW
IsRectEmpty
GetDlgItemTextA
GetTopWindow
RedrawWindow
LockWindowUpdate
GetDlgItem
CopyAcceleratorTableW
GetMenuItemCount
LoadImageW
LoadAcceleratorsA
LoadImageA
SetWindowLongW
GetPropW
LoadAcceleratorsW
CharLowerA
CreateAcceleratorTableW
InvalidateRgn
OffsetRect
SetScrollInfo
RegisterClassW
CharUpperA
mouse_event
comdlg32
GetSaveFileNameW
PrintDlgW
CommDlgExtendedError
gdi32
CreateBitmapIndirect
RealizePalette
SetBitmapBits
SelectObject
UnrealizeObject
CreateCompatibleDC
GetDeviceCaps
SetBkMode
GetTextFaceW
ExtFloodFill
CreateHatchBrush
PtVisible
EnumFontsW
Exports
Exports
Sections
.text Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.$debug Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dbg Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tmp1 Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tmp2 Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tmp3 Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tmp4 Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tsc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ