Static task
static1
Behavioral task
behavioral1
Sample
a18d1c4a0ab968ea855efefb7e4f8ed0cd234cccff5e6e118d8948c9925e7720.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a18d1c4a0ab968ea855efefb7e4f8ed0cd234cccff5e6e118d8948c9925e7720.exe
Resource
win10v2004-20220901-en
General
-
Target
a18d1c4a0ab968ea855efefb7e4f8ed0cd234cccff5e6e118d8948c9925e7720
-
Size
217KB
-
MD5
54b14d44bb8fb72a457c59e9b4683851
-
SHA1
f705be0186378d198afade3b553d0a9e77318628
-
SHA256
a18d1c4a0ab968ea855efefb7e4f8ed0cd234cccff5e6e118d8948c9925e7720
-
SHA512
2d03e1b34cf46d2c8e4417fe30cec83db4649bfcb76cba1b2f5174acb8edeed8447576ba502c5cfcbe0c6065df5eab98c583363cf4ea525a98ecb710e55b5116
-
SSDEEP
3072:ubkmysbx9MzfsJY15/uqMKYfG9w2IlugpkDfiJGYY7KcjSBx0w62:ubk/AIsY15/9MY9w2+rpGfiGneGQi2
Malware Config
Signatures
Files
-
a18d1c4a0ab968ea855efefb7e4f8ed0cd234cccff5e6e118d8948c9925e7720.exe windows x86
25464d6bffc25e15b7c0d106f1cb1ded
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
FindNextChangeNotification
WritePrivateProfileSectionW
GetSystemDirectoryW
RtlUnwind
GetConsoleCP
lstrcatA
GetCurrentProcess
GetProcAddress
VirtualAlloc
SetFilePointer
SetCurrentDirectoryW
HeapReAlloc
HeapAlloc
GetPrivateProfileIntW
CreateMailslotW
HeapFree
InterlockedExchange
GetModuleFileNameA
TerminateProcess
GetModuleHandleA
ExitProcess
ExpandEnvironmentStringsW
CreateEventW
DuplicateHandle
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
ReadConsoleW
TlsFree
GetProfileStringW
QueryPerformanceCounter
GetProfileIntW
GetThreadPriority
GetAtomNameW
VirtualQuery
GetCurrentThreadId
gdi32
PolyBezier
GetWinMetaFileBits
PolyTextOutW
SetGraphicsMode
GetWorldTransform
SetAbortProc
SetColorAdjustment
SetPolyFillMode
ExtCreatePen
GetPixel
user32
GetMonitorInfoW
WinHelpW
GetWindowTextLengthA
DlgDirSelectComboBoxExA
GetKeyboardLayout
SetWindowsHookW
IntersectRect
CharToOemW
SetTimer
TranslateMessage
CloseClipboard
WinHelpA
CopyAcceleratorTableW
SetDlgItemTextW
GetWindowWord
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ