Static task
static1
Behavioral task
behavioral1
Sample
857eddc9414b0cdedc819d73092232e3bb805477b4115cd6a91d81213106fdd4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
857eddc9414b0cdedc819d73092232e3bb805477b4115cd6a91d81213106fdd4.exe
Resource
win10v2004-20221111-en
General
-
Target
857eddc9414b0cdedc819d73092232e3bb805477b4115cd6a91d81213106fdd4
-
Size
156KB
-
MD5
d708c48f41716dfb518024bc9abf7c37
-
SHA1
0ecd22386a359c3f4e5fe77eb79e20b017841c87
-
SHA256
857eddc9414b0cdedc819d73092232e3bb805477b4115cd6a91d81213106fdd4
-
SHA512
ff9a19c0eb52099475eaa7c9de802ce973b328cb112aa4a085d338a474601d47358ada889e0c34fe882b373a09443ea373643094a43a1c5f29c4c36d3e4df137
-
SSDEEP
3072:YiMjSoaNzWScAOEHgU/kU0A2mDD5z4HFJeiSCm4GofgRfV6HMx4WoL:zo8CLYGArdz4aVCBF+s
Malware Config
Signatures
Files
-
857eddc9414b0cdedc819d73092232e3bb805477b4115cd6a91d81213106fdd4.exe windows x86
a2b0d2394b73d4814afb65ca5932b902
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
EnumSystemLocalesA
FindNextChangeNotification
LocalShrink
CallNamedPipeW
GetStartupInfoW
CreateFileA
DosDateTimeToFileTime
CreateMailslotW
GetLogicalDriveStringsA
_lread
SetErrorMode
GetProfileStringW
lstrcmpiA
GetCurrentDirectoryW
GetCurrentThread
WriteConsoleW
FindResourceW
GetProcessPriorityBoost
FillConsoleOutputCharacterA
CreateDirectoryExA
GetDateFormatA
GlobalFindAtomW
GetLocaleInfoA
CancelIo
GetFileType
lstrcatA
EnterCriticalSection
FindResourceExW
RequestWakeupLatency
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetStringTypeW
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
user32
mouse_event
WaitForInputIdle
FrameRect
DialogBoxIndirectParamW
GetClassInfoExA
ModifyMenuA
CallWindowProcW
EndDialog
GetUpdateRect
GetParent
SetProcessWindowStation
WinHelpA
GetClientRect
LoadBitmapA
CharToOemBuffW
SetClipboardData
MapVirtualKeyA
SetMenuItemInfoA
DestroyCaret
AppendMenuW
GetWindowWord
SetWindowsHookW
GetClassInfoExW
GetWindowRect
DdeAddData
DrawMenuBar
UnhookWinEvent
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE