Static task
static1
Behavioral task
behavioral1
Sample
ba2614a0da788e3423226bec27c9d45b0c3d5c4f280baee5985c4447679d007f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba2614a0da788e3423226bec27c9d45b0c3d5c4f280baee5985c4447679d007f.exe
Resource
win10v2004-20221111-en
General
-
Target
ba2614a0da788e3423226bec27c9d45b0c3d5c4f280baee5985c4447679d007f
-
Size
201KB
-
MD5
369749a2d017be018753f607629a69e7
-
SHA1
1c02610d3dca0abe84208e8b0d80d3327db1c9b3
-
SHA256
ba2614a0da788e3423226bec27c9d45b0c3d5c4f280baee5985c4447679d007f
-
SHA512
2535ffe10ad2d2f4780db344b351a0151b4e7dc1f2363e4d44ddf5d88ae408e7ad01be90d21082d5ea8b2b7724abd612d25483cf4b2d0661834e8db9d05cb322
-
SSDEEP
6144:YXFJNzNRys/xczytQZtqGiie5bzS+3c/:YXxzR/ntQZtq9ieY+s/
Malware Config
Signatures
Files
-
ba2614a0da788e3423226bec27c9d45b0c3d5c4f280baee5985c4447679d007f.exe windows x86
ca79a58fd038d8b1520162bf5396f370
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
GetModuleHandleA
GetProcAddress
GetStartupInfoW
ReplaceFileA
GetSystemDirectoryW
CompareFileTime
CreateMailslotA
GetTimeFormatW
GetFileTime
GetProcessHeap
GetVolumeInformationW
GetLocaleInfoW
CreateFileA
GetFileSize
OpenEventA
GetFileAttributesW
AddAtomA
IsBadReadPtr
OpenWaitableTimerA
FindResourceW
user32
DefFrameProcW
GetMenuItemID
GetDC
SetWindowTextW
SetDlgItemTextW
IsChild
GetMenuInfo
CharLowerA
UpdateLayeredWindow
CallWindowProcW
GetSubMenu
CreateDialogIndirectParamW
RegisterClassW
EnumChildWindows
MessageBoxIndirectA
wvsprintfA
ShowCaret
GetCursorPos
InsertMenuW
SetDlgItemInt
MoveWindow
DefFrameProcA
RemoveMenu
GetCapture
GetAsyncKeyState
EndMenu
RegisterClassExA
LoadIconA
LoadMenuIndirectW
UnregisterClassA
MonitorFromRect
gdi32
IntersectClipRect
CreateSolidBrush
GetCurrentObject
SelectBrushLocal
SetWindowExtEx
GetCharABCWidthsFloatA
GetGlyphOutlineW
CreateCompatibleDC
SetDIBColorTable
EndDoc
Escape
PlayMetaFile
CreateFontIndirectA
GetAspectRatioFilterEx
LPtoDP
CreateScalableFontResourceA
StartDocW
SetMapperFlags
advapi32
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyW
RegReplaceKeyW
ole32
IsValidIid
CoCreateGuid
CoDeactivateObject
OleUninitialize
OleCreate
CoDosDateTimeToFileTime
opengl32
glEdgeFlag
wsock32
s_perror
getpeername
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cTihsr Size: 512B - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UByt Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dFkS Size: 2KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VVQe Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.p Size: 2KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nwIL Size: 1024B - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yUVcQ Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.GkGoMu Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fyNB Size: 512B - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oChh Size: 2KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vc Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 958B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ