Static task
static1
Behavioral task
behavioral1
Sample
a590991f822caa502fe727f64127703ff274c852015029b388a7fde897913dfd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a590991f822caa502fe727f64127703ff274c852015029b388a7fde897913dfd.exe
Resource
win10v2004-20221111-en
General
-
Target
a590991f822caa502fe727f64127703ff274c852015029b388a7fde897913dfd
-
Size
491KB
-
MD5
f718b3db63f8362a7d3fbb547ca6714d
-
SHA1
efcfce9b40838725249878c3eab9d81ba2f72e8a
-
SHA256
a590991f822caa502fe727f64127703ff274c852015029b388a7fde897913dfd
-
SHA512
f60bcff6541106d3f18d2a3e1c7dfe5016047257dac3b67b34513ec396d5612c5cd5cd2b5c4dc5224cda348f865d22373bf89a840a3d9f84626f121c8e56adb1
-
SSDEEP
12288:cBkFgjF3gxEGgQc/bhKoeDmBB55gabBFfyu:cWmdwEikbhKoeKZ5g6Lf/
Malware Config
Signatures
Files
-
a590991f822caa502fe727f64127703ff274c852015029b388a7fde897913dfd.exe windows x86
28a3e7c4db37c06c6f816b609d2a6530
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreate
kernel32
CopyFileW
LCMapStringW
IsBadReadPtr
IsBadWritePtr
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateFileA
InterlockedExchange
SetDllDirectoryA
HeapSize
HeapReAlloc
HeapFree
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindClose
InitializeCriticalSection
FindNextFileW
InterlockedDecrement
advapi32
CloseEventLog
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
gdi32
DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
PatBlt
CreatePatternBrush
CreateBitmap
GetFontData
DeleteDC
StretchBlt
SetBrushOrgEx
SetStretchBltMode
ExtTextOutW
SetBkColor
GetDeviceCaps
MoveToEx
LineTo
TextOutW
SetTextColor
ExtCreatePen
GetTextExtentPointW
SetBkMode
SelectObject
GetTextExtentPoint32W
GetTextMetricsW
BitBlt
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 386KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ