Static task
static1
Behavioral task
behavioral1
Sample
a270183e9537d8970fb2bd19003efaec9c161c20bfd4561aeceb335ef39beab9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a270183e9537d8970fb2bd19003efaec9c161c20bfd4561aeceb335ef39beab9.exe
Resource
win10v2004-20221111-en
General
-
Target
a270183e9537d8970fb2bd19003efaec9c161c20bfd4561aeceb335ef39beab9
-
Size
160KB
-
MD5
8d127297b2ed9ef8ea9e72b72fd9d3d2
-
SHA1
e05fcc28bae34e51e328e41213265e28da11f803
-
SHA256
a270183e9537d8970fb2bd19003efaec9c161c20bfd4561aeceb335ef39beab9
-
SHA512
74ff0d2a14bf16bc0006c54f394cd6d3113c9bf528510239a5523be330eade73436e934c0451c44f9712345107684d4045ce08412b34eea390bb6905200d3cc9
-
SSDEEP
3072:o/AjQ9rJHqd3NUSYBs7f6/cJBvX2Q/29G6Zz7r:o/wQ1JHIeHa7C0JBv4G6N7r
Malware Config
Signatures
Files
-
a270183e9537d8970fb2bd19003efaec9c161c20bfd4561aeceb335ef39beab9.exe windows x86
77748d886f6f7da5c3a1941a1ab443a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBkColor
DeleteObject
CreateDiscardableBitmap
GetTextAlign
user32
RegisterClassExA
SetForegroundWindow
DispatchMessageA
SetTimer
LoadCursorW
SetWindowPos
DialogBoxParamA
GetWindowLongW
GetDlgItemInt
PostQuitMessage
BeginPaint
PeekMessageW
SetDlgItemTextW
GetDlgItem
CharNextA
CharPrevW
CreateWindowExA
CharPrevA
EndPaint
GetDC
SendDlgItemMessageW
SendDlgItemMessageA
CreateWindowExA
LoadStringW
DefWindowProcA
wsprintfW
DialogBoxParamW
GetFocus
GetSysColor
ShowWindow
GetWindowRect
PeekMessageA
GetClientRect
SendMessageA
KillTimer
GetDesktopWindow
IsCharLowerA
LoadIconW
GetWindowLongA
SetDlgItemTextA
kernel32
GetACP
GetDateFormatA
GetFileAttributesExA
GetFileAttributesExW
GetLocalTime
GetCurrentProcessId
IsBadWritePtr
FindAtomA
ExitThread
GetModuleHandleA
lstrcmpA
GetModuleHandleW
CreateTimerQueue
GetShortPathNameA
GetModuleHandleA
OpenEventW
DeleteFiber
GetCommandLineA
DeleteFileW
lstrcpy
FileTimeToDosDateTime
CancelTimerQueueTimer
ntdll
NtSuspendProcess
NtCompareTokens
ZwCreateSemaphore
NtAllocateVirtualMemory
RtlIpv6AddressToStringA
NtRaiseException
RtlIsRangeAvailable
NtCreateTimer
__isascii
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ