Static task
static1
Behavioral task
behavioral1
Sample
936bc88c07050e3cbbfaa63cc59154d0ce9fe7fef37b182850ccdf3519fe4595.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
936bc88c07050e3cbbfaa63cc59154d0ce9fe7fef37b182850ccdf3519fe4595.exe
Resource
win10v2004-20220812-en
General
-
Target
936bc88c07050e3cbbfaa63cc59154d0ce9fe7fef37b182850ccdf3519fe4595
-
Size
245KB
-
MD5
474a6cc412bd3f6cfe02528bdd39f0f9
-
SHA1
55c7ab2b41f94bb774add0c5bfb0df9303ef21dd
-
SHA256
936bc88c07050e3cbbfaa63cc59154d0ce9fe7fef37b182850ccdf3519fe4595
-
SHA512
d9cdadb46d1c2cd6fe116e1c9d1e5f0f3f7895e580f1cb9cda41168257609e627b65a11d31d767e63cadc5d28192b38183cd26b4a4ea83a04a3096e83525448f
-
SSDEEP
6144:mSCS8Ote+wfEnSvXKN0fmbbM7E+XwUWCse5jrZLYWi2O:5XI+gySvj+bbY8UNHNrZLYWi
Malware Config
Signatures
Files
-
936bc88c07050e3cbbfaa63cc59154d0ce9fe7fef37b182850ccdf3519fe4595.exe windows x86
ab8fefb4d565f4b35076ff9b60173146
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
InvalidateRgn
PostMessageW
UpdateWindow
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
PostQuitMessage
SetWindowPos
MapDialogRect
kernel32
LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
LZSeek
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer
oleaut32
DispGetIDsOfNames
OleLoadPicture
SafeArrayGetElement
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen
shlwapi
PathFindExtensionA
Sections
.text Size: 129KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ