Static task
static1
Behavioral task
behavioral1
Sample
f907c4e45ed2976fa1d069181fb56c9b6d96bd848c495bd23217687dff7066c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f907c4e45ed2976fa1d069181fb56c9b6d96bd848c495bd23217687dff7066c3.exe
Resource
win10v2004-20221111-en
General
-
Target
f907c4e45ed2976fa1d069181fb56c9b6d96bd848c495bd23217687dff7066c3
-
Size
312KB
-
MD5
4560e5a70d9eaea160d2c3cbbf9a4efd
-
SHA1
a74052d664c23f482cbf2ee52b8e14d017f2319e
-
SHA256
f907c4e45ed2976fa1d069181fb56c9b6d96bd848c495bd23217687dff7066c3
-
SHA512
19c01f592b255cd495b9b8ac9a8377f64c41d1ddb058d198d5b9f30f6e54d043dd526696ae757668a2c1b9ce11c51fa7a31dbed06b85a11a661cc91b9fd6ba64
-
SSDEEP
6144:P2XgoPxqKxwUiskMyUpwvOBGMSkjHgQewbG4Efm+hqlMqbI/C9VS:P2woPxBS3eKkjHgQbG4EfmUABV
Malware Config
Signatures
Files
-
f907c4e45ed2976fa1d069181fb56c9b6d96bd848c495bd23217687dff7066c3.exe windows x86
84ac135e231bb9a3244bb82f5c5544a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
Sleep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
HeapFree
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
CreateDirectoryA
lstrcpyA
MulDiv
FindResourceA
ExitProcess
FindResourceExA
SizeofResource
LoadResource
LockResource
CreateProcessA
GetWindowsDirectoryA
lstrlenA
user32
DialogBoxParamA
LoadImageA
SendMessageA
EndDialog
GetDlgItem
GetClientRect
GetDC
ReleaseDC
wsprintfA
SetWindowTextA
SetRect
DrawEdge
FillRect
gdi32
GetDeviceCaps
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ