Static task
static1
Behavioral task
behavioral1
Sample
be31173a925f8e2f5e9dd2c3dfd7cac9570e01252f4ff736003d9933941d5245.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
be31173a925f8e2f5e9dd2c3dfd7cac9570e01252f4ff736003d9933941d5245.exe
Resource
win10v2004-20220901-en
General
-
Target
be31173a925f8e2f5e9dd2c3dfd7cac9570e01252f4ff736003d9933941d5245
-
Size
160KB
-
MD5
c6d61c94eb9ac2a076268cbff43aecff
-
SHA1
2246128548d0d8366f1633123325ecf5602e38d3
-
SHA256
be31173a925f8e2f5e9dd2c3dfd7cac9570e01252f4ff736003d9933941d5245
-
SHA512
b5b2cb07e924b663a214f20bfac64d22ab1db411564fbbe6f7dbdd9c1e42aaf1108b3d873aaa29fa3d09926c8c6120c2d6bc96ec11df458c528406006c895e78
-
SSDEEP
1536:KYYlQW7fw96XsozfDIHwfXvoT0RVhaXQXDG+NwzU2z:KdKKf468ozLIH2XvoTZXf+GZ
Malware Config
Signatures
Files
-
be31173a925f8e2f5e9dd2c3dfd7cac9570e01252f4ff736003d9933941d5245.exe windows x86
3b5da0b33a4d261372d36be75a42abca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
FreeLibrary
LoadLibraryA
FormatMessageW
LocalFree
ReadFile
GetCommandLineW
InterlockedDecrement
SetUnhandledExceptionFilter
lstrlenW
GetLastError
WriteFile
InitializeCriticalSection
SetFilePointer
FreeLibrary
GetACP
HeapFree
GetLastError
GetCommandLineW
ExitProcess
SetFilePointer
CreateFileW
GetCommandLineA
GetProcessHeap
UnhandledExceptionFilter
InterlockedDecrement
CreateFileW
GetTickCount
SetEvent
SetEvent
ReadFile
ReadFile
GetCurrentProcess
HeapDestroy
CreateFileW
QueryPerformanceCounter
LocalFree
SetLastError
SetEvent
FormatMessageW
GetProcAddress
WaitForSingleObject
QueryPerformanceCounter
HeapFree
VirtualFree
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
GetLastError
SetEvent
LeaveCriticalSection
GetCurrentThreadId
GetTickCount
LeaveCriticalSection
GetCurrentThreadId
VirtualAlloc
InterlockedDecrement
GetStartupInfoW
ReadFile
ReadFile
LeaveCriticalSection
HeapDestroy
CreateFileW
GetModuleHandleA
VirtualAlloc
user32
SetTimer
SetCursor
SetWindowLongW
GetDesktopWindow
MessageBoxA
CopyRect
KillTimer
GetSystemMenu
ShowWindow
GetDesktopWindow
GetMenu
RegisterClassW
IsDialogMessageW
MessageBeep
SendMessageA
MoveWindow
SetRect
GetDC
GetParent
wsprintfW
DestroyMenu
IsWindowVisible
LoadAcceleratorsW
wsprintfA
FillRect
ReleaseCapture
LoadStringW
wsprintfW
LoadMenuW
GetClientRect
CallWindowProcW
PostQuitMessage
GetWindowLongW
GetWindowLongW
GetSysColor
IsIconic
GetSystemMetrics
DialogBoxParamW
Sections
Size: 143KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�vmp0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
�reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE