Static task
static1
Behavioral task
behavioral1
Sample
de0d49ed350484c857dc76ebafc54baf621103f362accd6b1d9f6e7bb5b076b4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
de0d49ed350484c857dc76ebafc54baf621103f362accd6b1d9f6e7bb5b076b4.exe
Resource
win10v2004-20220812-en
General
-
Target
de0d49ed350484c857dc76ebafc54baf621103f362accd6b1d9f6e7bb5b076b4
-
Size
91KB
-
MD5
180f009a8a3bc02270deffa5b5989c47
-
SHA1
6c8d3d2f1a29676e688acaa1ade6d70515a2552f
-
SHA256
de0d49ed350484c857dc76ebafc54baf621103f362accd6b1d9f6e7bb5b076b4
-
SHA512
1793b10f2087d8a889b32537f912f064d98110971c25fe3b1dee04b6d8b53f83e25ca69d845379feca6200c8e96f0d6b2fb87acc5ed16dbf6f0baf855030160e
-
SSDEEP
1536:ODJO0snJXQjKhaZunfxAe4VweoUD5K+1QacMga0tte5DFRNB1:0QQjh8nprAwaQ0+m5h7B1
Malware Config
Signatures
Files
-
de0d49ed350484c857dc76ebafc54baf621103f362accd6b1d9f6e7bb5b076b4.exe windows x86
7eef2f5775629152630d7e841c1c4602
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetTapePosition
TlsAlloc
EndUpdateResourceW
WriteConsoleInputW
SuspendThread
FindFirstVolumeMountPointA
QueryDosDeviceW
FindAtomW
GetLastError
ExpandEnvironmentStringsW
GetConsoleAliasExesW
GetBinaryTypeA
CreateDirectoryW
BeginUpdateResourceW
VirtualProtect
InterlockedCompareExchange
GetEnvironmentStrings
GlobalFindAtomA
CreateFileMappingW
EnumDateFormatsW
TerminateThread
GetPrivateProfileIntW
LoadLibraryW
GetVDMCurrentDirectories
HeapWalk
user32
SetDlgItemInt
ScrollWindowEx
RegisterTasklist
RegisterDeviceNotificationW
DrawTextExW
SendIMEMessageExW
keybd_event
PrivateExtractIconsA
PrivateExtractIconsW
RegisterClipboardFormatA
DefDlgProcW
SystemParametersInfoA
RegisterWindowMessageA
SetPropW
CharLowerBuffW
GetMenuItemRect
CheckDlgButton
RegisterClassA
MsgWaitForMultipleObjects
GetMessagePos
InsertMenuA
GetWindowTextLengthW
CreateWindowStationA
Win32PoolAllocationStats
CreateWindowStationW
wsprintfA
CharToOemBuffA
MsgWaitForMultipleObjectsEx
DrawFocusRect
CharLowerA
CharPrevExA
UpdateLayeredWindow
GetWindowContextHelpId
SetFocus
GetMenuBarInfo
SetParent
PostQuitMessage
SetMenu
VkKeyScanA
LoadIconW
InvalidateRect
OemToCharBuffA
gdi32
SetBkColor
GdiGetBatchLimit
GetCharABCWidthsW
PolyPolyline
GdiConvertPalette
GdiFixUpHandle
FONTOBJ_cGetGlyphs
GdiCreateLocalEnhMetaFile
GdiConsoleTextOut
XFORMOBJ_iGetXform
CreateEllipticRgn
GetBoundsRect
GetEnhMetaFileDescriptionW
CreateFontW
GetGlyphOutlineWow
DeleteDC
GdiEntry16
AnimatePalette
ResizePalette
EngCreateBitmap
UpdateICMRegKeyW
SetBrushOrgEx
TextOutW
CreateDIBSection
EndPage
PlayEnhMetaFileRecord
LineDDA
GetKerningPairsA
CreatePen
FontIsLinked
EnumEnhMetaFile
EngLockSurface
GetTextExtentExPointW
comdlg32
PageSetupDlgA
PrintDlgExW
dwLBSubclass
FindTextW
ChooseFontA
ChooseColorA
ReplaceTextA
GetSaveFileNameW
Ssync_ANSI_UNICODE_Struct_For_WOW
PrintDlgA
GetFileTitleW
CommDlgExtendedError
psapi
GetModuleFileNameExA
EnumProcesses
GetProcessMemoryInfo
GetDeviceDriverFileNameW
GetModuleFileNameExW
GetDeviceDriverBaseNameW
GetModuleBaseNameA
EnumDeviceDrivers
GetDeviceDriverFileNameA
GetModuleInformation
InitializeProcessForWsWatch
QueryWorkingSet
EmptyWorkingSet
GetDeviceDriverBaseNameA
EnumProcessModules
GetMappedFileNameA
GetModuleBaseNameW
comctl32
ImageList_GetIcon
ImageList_BeginDrag
ImageList_DragEnter
ImageList_Draw
ImageList_SetFlags
ImageList_AddIcon
DrawStatusText
ImageList_DrawIndirect
ImageList_Merge
InitializeFlatSB
UninitializeFlatSB
CreateStatusWindowW
MakeDragList
CreateStatusWindow
Sections
.text Size: 4KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE