Static task
static1
Behavioral task
behavioral1
Sample
2e596970cb49f8c7c4167f01b9ba5a717ac2c49a14e835df34fc5c99d240f3e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e596970cb49f8c7c4167f01b9ba5a717ac2c49a14e835df34fc5c99d240f3e1.exe
Resource
win10v2004-20220812-en
General
-
Target
2e596970cb49f8c7c4167f01b9ba5a717ac2c49a14e835df34fc5c99d240f3e1
-
Size
709KB
-
MD5
59d62eaa0f737f425bf1017ab479f6e2
-
SHA1
6b0f4e68cb585e3ea53cde76a6a553766c047b9c
-
SHA256
2e596970cb49f8c7c4167f01b9ba5a717ac2c49a14e835df34fc5c99d240f3e1
-
SHA512
2e73d3ab2061c55f74a95a3eb399280dc87b16c84e847cd7d204d69d3d9bb2a8830e54cc2e443e604025d41ed56d20901cdebe4ba2528e6d5738c980e2c8d0d0
-
SSDEEP
12288:TgRlKnfCJe/s59r/ZJtAu4bVNno4ygL6MpCI3LI0HQr97Q1kCgUsmFnmZz34j3O:TwlKnX/sn3tmbVNo4yg+GH3LI0ik1kGa
Malware Config
Signatures
Files
-
2e596970cb49f8c7c4167f01b9ba5a717ac2c49a14e835df34fc5c99d240f3e1.exe windows x86
4d212867cd0ca81e4247b4b7a7e65505
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
msacm32
acmFormatTagDetailsA
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
acmStreamClose
comctl32
ord17
kernel32
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCurrentProcess
GetVersionExA
CreateProcessA
ExpandEnvironmentStringsA
GetExitCodeProcess
LocalFileTimeToFileTime
SystemTimeToFileTime
RemoveDirectoryA
Sleep
DeleteFileA
GetTempPathA
SetFileAttributesA
CopyFileA
CreateMutexA
GetDriveTypeA
CompareFileTime
WaitForSingleObject
GetLastError
CreateEventA
SetEvent
OpenEventA
GetModuleFileNameA
GetUserDefaultLangID
SetErrorMode
SetStdHandle
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
HeapCreate
FlushFileBuffers
TlsGetValue
SetLastError
SetFileTime
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
TerminateProcess
RtlUnwind
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
VirtualFree
VirtualAlloc
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcmpiA
SetFilePointer
GetLocaleInfoA
GetLocaleInfoW
GetFileSize
GetFileTime
CloseHandle
WriteFile
ReadFile
CreateFileA
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
ExitProcess
HeapDestroy
GetFileAttributesA
user32
PostMessageA
MoveWindow
GetAsyncKeyState
KillTimer
EnableMenuItem
GetWindowLongA
SetWindowLongA
GetSysColorBrush
CallWindowProcA
GetClientRect
GetDesktopWindow
GetDC
ReleaseDC
EnumDisplaySettingsA
GetSysColor
FillRect
CopyRect
GetSystemMetrics
DrawFrameControl
DrawIcon
DrawTextA
RedrawWindow
FindWindowA
SetFocus
EnableWindow
ShowWindow
LoadIconA
LoadCursorA
SetCursor
SetTimer
DialogBoxParamA
CreateDialogParamA
SendDlgItemMessageA
MessageBeep
GetDlgItem
EndDialog
SetDlgItemTextA
GetParent
SendMessageA
PeekMessageA
DispatchMessageA
SetForegroundWindow
SetWindowTextA
DestroyWindow
MessageBoxA
IsIconic
UnregisterHotKey
RegisterHotKey
SetCursorPos
ChangeDisplaySettingsA
GetForegroundWindow
SystemParametersInfoA
GetFocus
GetSystemMenu
gdi32
GetStockObject
GetObjectA
GetTextExtentPoint32A
TextOutA
SetBkColor
GetDeviceCaps
SelectObject
SetTextColor
SetBkMode
DeleteObject
CreateFontIndirectA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 581KB - Virtual size: 923KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE