Static task
static1
Behavioral task
behavioral1
Sample
c27e531bbecdf7c1ecc23bad821d485f1c8095ce3d028fa188d7e982fcd6b62b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c27e531bbecdf7c1ecc23bad821d485f1c8095ce3d028fa188d7e982fcd6b62b.exe
Resource
win10v2004-20220901-en
General
-
Target
c27e531bbecdf7c1ecc23bad821d485f1c8095ce3d028fa188d7e982fcd6b62b
-
Size
22KB
-
MD5
535f1625e83dcafaf235f5d49b3559d3
-
SHA1
535768095b2b7888d82dff38a2b64a27fc37c1a2
-
SHA256
c27e531bbecdf7c1ecc23bad821d485f1c8095ce3d028fa188d7e982fcd6b62b
-
SHA512
91f63ab99a9c4c333bda2e738d5c19352f9e755c8d74d5d95de89b2a9a372711a44191091ed4093b283260e47ca72ff144963409c6ae5f22c4785b32b914ca61
-
SSDEEP
384:riVHVJJkRv31kVgyrtwO9HwzQhL+ybVcRPLM78:mVNkRv31kNwH96c5Q78
Malware Config
Signatures
Files
-
c27e531bbecdf7c1ecc23bad821d485f1c8095ce3d028fa188d7e982fcd6b62b.exe windows x86
f359be588ce59d6a92ec01f2fe7529bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
UnregisterHotKey
UnhookWindowsHookEx
TranslateMessage
ShowWindow
SetWindowsHookExA
SetWindowPos
SetWindowLongA
SetTimer
SetRect
SetForegroundWindow
SendMessageA
RegisterHotKey
RegisterClassExA
PostQuitMessage
KillTimer
GetWindowTextA
GetWindowLongA
GetSystemMetrics
GetSysColor
GetMessageA
GetForegroundWindow
GetDlgItemTextA
GetClientRect
GetClassNameA
FillRect
EnumWindows
EndPaint
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallNextHookEx
BeginPaint
kernel32
lstrlenW
lstrlenA
lstrcpyW
lstrcpyA
lstrcmpA
lstrcatW
lstrcatA
WideCharToMultiByte
Sleep
SetFileTime
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetFileTime
GetEnvironmentVariableA
GetCurrentThreadId
GetCommandLineA
ExitProcess
CreateThread
CreateFileW
CopyFileA
CloseHandle
comctl32
InitCommonControls
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
gdi32
CreateSolidBrush
SelectObject
SetBkMode
SetTextColor
CreateFontIndirectA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ