Static task
static1
Behavioral task
behavioral1
Sample
42aaa1ee80431c38f755e05c09e1a46ff8518898b7b8a48038200da8e58144d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42aaa1ee80431c38f755e05c09e1a46ff8518898b7b8a48038200da8e58144d7.exe
Resource
win10v2004-20221111-en
General
-
Target
42aaa1ee80431c38f755e05c09e1a46ff8518898b7b8a48038200da8e58144d7
-
Size
16.2MB
-
MD5
b2136e9450ceee992f05aa177e979d3d
-
SHA1
66862ed5f4e5eb8457dbc7109912d3f83715f578
-
SHA256
42aaa1ee80431c38f755e05c09e1a46ff8518898b7b8a48038200da8e58144d7
-
SHA512
a388e6618d73fbabc66a7e992ecca888b9c8fd19dd5e47cc394dbe78cbb1c8855338f50b668c4a4fce1947ff322627a04c6498bbe48b00c65aaa47d5d6ddda1d
-
SSDEEP
49152:oQcqm8Vw7sLwyINkbmrN1vy43jLoAOrFoIhE3Z9QKueSMEpd2CW7a:ncHGQjUAO5oIQyrLpdzW7
Malware Config
Signatures
Files
-
42aaa1ee80431c38f755e05c09e1a46ff8518898b7b8a48038200da8e58144d7.exe windows x86
a159d2b0cbe368dc54191cef08f2b21f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
SetStdHandle
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
SetFilePointer
InterlockedExchange
RtlUnwind
InitializeCriticalSection
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
TlsAlloc
GetStartupInfoA
GetFileType
SetHandleCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
VirtualProtect
GetSystemInfo
CloseHandle
GetModuleHandleA
GetProcAddress
GetLastError
TerminateProcess
Sleep
ExitProcess
GetCommandLineW
VirtualQuery
GetCommandLineA
GetEnvironmentStringsW
HeapFree
HeapAlloc
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
user32
HideCaret
SendDlgItemMessageA
SetKeyboardState
SetCapture
IsZoomed
DeleteMenu
GetParent
LoadIconA
GetClientRect
CreateMenu
GetWindowTextLengthA
SendMessageA
RegisterWindowMessageA
GetDC
GetCapture
IsDialogMessageA
GetForegroundWindow
GetWindowPlacement
SetWindowLongA
GetWindowLongA
GetClipboardData
EmptyClipboard
SetClassLongA
GetDlgItem
EndDialog
DestroyCaret
GetSysColor
AppendMenuA
IsWindow
DispatchMessageA
OpenClipboard
SystemParametersInfoA
ReleaseCapture
SetWindowTextA
EnableWindow
SetClipboardData
GetDlgItemTextA
GetCaretBlinkTime
CheckMenuItem
GetClipboardOwner
GetMessageTime
RegisterClassA
MoveWindow
CreateWindowExA
gdi32
GetCharWidthW
LineTo
SetTextColor
GetCharacterPlacementW
DeleteDC
CreateFontA
SetBkColor
ExcludeClipRect
CreateBitmap
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetCharWidthA
GetCharWidth32W
SelectPalette
GetCharWidth32A
GetCharABCWidthsFloatA
CreatePen
GetTextMetricsA
SetTextAlign
IntersectClipRect
GetPixel
UpdateColors
shell32
CommandLineToArgvW
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ