Static task
static1
Behavioral task
behavioral1
Sample
f7203d37d7f83fce77559aebfb1854ba2e10f0e3ef2057931bbb3b9f583e93c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f7203d37d7f83fce77559aebfb1854ba2e10f0e3ef2057931bbb3b9f583e93c4.exe
Resource
win10v2004-20220901-en
General
-
Target
f7203d37d7f83fce77559aebfb1854ba2e10f0e3ef2057931bbb3b9f583e93c4
-
Size
552KB
-
MD5
4b9bc18557f4ab8f094a74f54fd41e72
-
SHA1
0f0bdd4b32f487a6489ca6076b9cae0ec8fa3505
-
SHA256
f7203d37d7f83fce77559aebfb1854ba2e10f0e3ef2057931bbb3b9f583e93c4
-
SHA512
b5d89638b172996cd7757384d7eb688af40d9d381070a97e8065df232f891adbf247af3e2bf95ff6056b35f64be5e366c973d8ed02d1ffe4675a31439d75af35
-
SSDEEP
12288:uIX/JKTrgc1iX30q3CGgpZmdne0hcOk1kIIMBAU3O2FYG4nnGD:uIXxKTMDn0/ZChcNjzuG
Malware Config
Signatures
Files
-
f7203d37d7f83fce77559aebfb1854ba2e10f0e3ef2057931bbb3b9f583e93c4.exe windows x86
fcfaf193a735abc896ff0f5af478bbf3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetModuleHandleW
GetACP
CloseHandle
SetFilePointer
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCurrentDirectoryA
LockResource
GetCurrentProcessId
SizeofResource
FileTimeToLocalFileTime
lstrlenW
GetEnvironmentStringsW
GlobalFree
lstrlenA
GetSystemInfo
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
CreateFileA
GetFileType
CreateEventA
CreateFileW
FindFirstFileW
CreateFileMappingA
CompareStringA
GetCurrentThreadId
FindNextFileW
CompareStringW
GetProcAddress
GetStartupInfoA
LoadLibraryA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
HeapCreate
GetVersion
SetEndOfFile
GlobalAlloc
TerminateProcess
SetStdHandle
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
SetLastError
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeEnvironmentStringsW
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
SetEvent
ReleaseMutex
GetStdHandle
GetProcessHeap
GetEnvironmentStrings
TlsSetValue
GetEnvironmentVariableA
GetVersionExA
VirtualFree
RtlUnwind
WriteFile
LeaveCriticalSection
GetCPInfo
LCMapStringA
GetStringTypeA
CreateProcessA
IsValidCodePage
UnmapViewOfFile
FindResourceW
Sleep
VirtualAlloc
SetEnvironmentVariableA
GetOEMCP
oleaut32
SysAllocStringLen
SysFreeString
SysStringLen
user32
SetWindowTextA
EndDialog
SetWindowLongA
GetWindowRect
GetSystemMetrics
KillTimer
DispatchMessageA
CreateWindowExA
GetWindowLongA
RegisterClassA
IsIconic
LoadStringA
IsWindowEnabled
GetDlgItem
PeekMessageA
EnableWindow
ShowWindow
DestroyWindow
GetClientRect
SendMessageA
ReleaseDC
GetDC
SetWindowPos
PostQuitMessage
IsWindowVisible
InvalidateRect
CallWindowProcA
GetFocus
GetSysColor
SystemParametersInfoA
TranslateMessage
EnableMenuItem
gdi32
CreateSolidBrush
SetTextColor
GetStockObject
GetDeviceCaps
DeleteObject
SetBkColor
SetBkMode
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 520KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ