Static task
static1
Behavioral task
behavioral1
Sample
c333bb0d0740908bf4d60b985a7a336e85fafb59b3ef95158bdcd54c3d1115f0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c333bb0d0740908bf4d60b985a7a336e85fafb59b3ef95158bdcd54c3d1115f0.exe
Resource
win10v2004-20221111-en
General
-
Target
c333bb0d0740908bf4d60b985a7a336e85fafb59b3ef95158bdcd54c3d1115f0
-
Size
664KB
-
MD5
a621a05ea8d7018cb62fb6099d247368
-
SHA1
136ec6d469efa2866ba8f0a06483470da452233a
-
SHA256
c333bb0d0740908bf4d60b985a7a336e85fafb59b3ef95158bdcd54c3d1115f0
-
SHA512
16080a0c09a4fdfceba66b056ff325d86fedee319b6f5825592531de6fd96a9aa7cbf7086c70df511c0d26359a3ced141310a932011ff1d85fbec400abc064c1
-
SSDEEP
12288:IcMM9y5hk+hEcIUEoK145xupHQnp11Km:IcDyPk+icHEoK1en
Malware Config
Signatures
Files
-
c333bb0d0740908bf4d60b985a7a336e85fafb59b3ef95158bdcd54c3d1115f0.exe windows x86
70b4a06b0b0e3add08ebf3ac80db8861
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
modf
_ftol
sprintf
user32
wsprintfA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetDesktopWindow
SetFocus
PostQuitMessage
DefWindowProcA
RegisterClassExA
LoadCursorA
LoadIconA
SendMessageA
CreateWindowExA
IsWindowEnabled
EnableWindow
MapWindowPoints
GetParent
GetWindowRect
MoveWindow
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
IsWindow
UpdateWindow
ShowWindow
IsWindowVisible
CallWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
KillTimer
SetTimer
MessageBoxA
kernel32
Process32Next
CloseHandle
Process32First
GetVersionExA
DeleteFileA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
CreateFileA
WriteFile
IsBadReadPtr
HeapFree
HeapAlloc
ExitProcess
GetProcessHeap
FreeLibrary
ReadProcessMemory
GetCurrentProcess
RtlMoveMemory
lstrcpyn
RtlFillMemory
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateToolhelp32Snapshot
comctl32
ord17
gdi32
CreateFontA
DeleteObject
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 624KB - Virtual size: 621KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE