Static task
static1
Behavioral task
behavioral1
Sample
f59fa9183b83cf591b38d837c5ada3b303151d467c261ebb316f94d7af221049.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f59fa9183b83cf591b38d837c5ada3b303151d467c261ebb316f94d7af221049.exe
Resource
win10v2004-20220812-en
General
-
Target
f59fa9183b83cf591b38d837c5ada3b303151d467c261ebb316f94d7af221049
-
Size
266KB
-
MD5
258dced5e15d2bde45426a6985cad485
-
SHA1
9871c99b3e1c82e7cc09bdf31b2682f3ec3b7c4f
-
SHA256
f59fa9183b83cf591b38d837c5ada3b303151d467c261ebb316f94d7af221049
-
SHA512
f9fa50f40e81e7ab24078c9322e784a0b4c0fa0efacfecd2eca58240f85d105ffda6edad6c16ee81c57235797ce91fd43880c41f12541d805c40d6250cdd47ed
-
SSDEEP
6144:S1KVC+VS7eLd5z1Ul5YVdUCj9LwhPdFov374eA:SQVC+VS7ydvUS9LudFoTi
Malware Config
Signatures
Files
-
f59fa9183b83cf591b38d837c5ada3b303151d467c261ebb316f94d7af221049.exe windows x86
194defdf53066a56b504c61f98506a25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateMutexA
GetOEMCP
GetUserDefaultLangID
GetLargestConsoleWindowSize
TlsFree
GetExitCodeThread
ReleaseMutex
CreatePipe
TlsGetValue
SetEvent
GetConsoleCP
GetModuleHandleA
CancelWaitableTimer
IsDBCSLeadByte
AddAtomA
GetThreadPriority
GetThreadLocale
GetThreadTimes
CompareStringA
GetHandleContext
user32
GetWindowTextA
GetClassNameA
GetWindowTextLengthA
GetActiveWindow
GetSystemMetrics
GetDC
RegisterClassA
ReleaseDC
ShowWindow
ReleaseDC
GetFocus
IsWindowVisible
IsIconic
GetWindow
InvalidateRect
ValidateRect
GetForegroundWindow
CloseWindow
GetClassInfoExA
dsound
DllCanUnloadNow
GetDeviceID
DllGetClassObject
DirectSoundEnumerateA
DirectSoundCreate
mscms
CheckColors
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ