Static task
static1
Behavioral task
behavioral1
Sample
f74852802c37627ed14f99b36f33684bbeb98550e15ce1bb879d1167a6890dbb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f74852802c37627ed14f99b36f33684bbeb98550e15ce1bb879d1167a6890dbb.exe
Resource
win10v2004-20221111-en
General
-
Target
f74852802c37627ed14f99b36f33684bbeb98550e15ce1bb879d1167a6890dbb
-
Size
203KB
-
MD5
617c5e9a7601ef9c3dc32faba62572c6
-
SHA1
cec96d0b58a8d1c5c9e7f1e0621a587d15167bcd
-
SHA256
f74852802c37627ed14f99b36f33684bbeb98550e15ce1bb879d1167a6890dbb
-
SHA512
65d9d89f73f2a521634ff97b6d4539051e63d1a6914b00a9b5d8cdecdaf5ef1d4d8ccb4c77183665e345768dc866b193cf77ea19f75cdcf7b6eb92f4f982baa8
-
SSDEEP
3072:tBvY3v12VVjAFn59U27TdOxAD6ICwc/qObEPd2kIN2F0f0Lwk:Yc8LdfdOxAWIVKqMEPdbIN2n
Malware Config
Signatures
Files
-
f74852802c37627ed14f99b36f33684bbeb98550e15ce1bb879d1167a6890dbb.exe windows x86
55b1a43c7d9d88a8f2694dfb0ef66fdb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GlobalWire
SetDllDirectoryA
SetCommState
GetUserGeoID
GetVolumePathNamesForVolumeNameA
GetConsoleTitleA
GetNumberFormatA
SetTimerQueueTimer
CreateEventA
GetFileSizeEx
GetModuleHandleA
VerifyVersionInfoA
FlushFileBuffers
GetLocaleInfoA
LZStart
GetProcessHeaps
LockFileEx
lstrcmpi
OpenSemaphoreA
RaiseException
OpenFile
WriteFileEx
GetFileAttributesA
IsBadCodePtr
DisconnectNamedPipe
WritePrivateProfileSectionA
GetVersionExA
HeapReAlloc
GetStringTypeExW
ConnectNamedPipe
GetCompressedFileSizeA
OpenFileMappingA
SetProcessPriorityBoost
VirtualAlloc
GetProcessHeap
VirtualLock
LocalFlags
VirtualProtectEx
GetStartupInfoA
ReadConsoleInputA
GetConsoleAliasesA
SetComputerNameExA
GetModuleFileNameA
IsDebuggerPresent
WriteConsoleOutputCharacterA
GetConsoleDisplayMode
SetConsoleNumberOfCommandsA
SetFileAttributesA
GetThreadContext
GetNamedPipeHandleStateA
WaitForMultipleObjects
GetModuleHandleA
ChangeTimerQueueTimer
GetSystemTimes
OpenJobObjectA
lstrcmpA
GetThreadContext
IsBadReadPtr
DeleteFileA
GetProfileSectionA
ReadConsoleInputA
GetFileAttributesA
GetCommModemStatus
SetConsoleNumberOfCommandsA
GlobalHandle
FindFirstVolumeMountPointW
UpdateResourceA
GetCompressedFileSizeA
GetDiskFreeSpaceA
AddConsoleAliasA
DeleteTimerQueueTimer
SetConsoleNumberOfCommandsA
HeapDestroy
WriteConsoleOutputCharacterA
TermsrvAppInstallMode
GetVolumeNameForVolumeMountPointA
Module32Next
GetDriveTypeA
SetLocaleInfoA
GetVolumeNameForVolumeMountPointA
GetConsoleAliasExesLengthW
FindFirstChangeNotificationA
UpdateResourceA
SetConsoleNumberOfCommandsA
UpdateResourceA
SetLocalPrimaryComputerNameA
GetFileType
CreateNamedPipeA
WriteConsoleOutputAttribute
WriteFile
ExpungeConsoleCommandHistoryA
HeapDestroy
GetWindowsDirectoryA
d3d8thk
OsThunkD3dContextCreate
d3d8
Direct3DCreate8
user32
DefMDIChildProcA
CreateCaret
RealGetWindowClass
SetDlgItemTextA
PrivateExtractIconsA
ScrollWindowEx
SetCapture
LoadKeyboardLayoutEx
GetUserObjectInformationA
ClientToScreen
LoadIconA
ToAsciiEx
SetPropA
GetClipboardFormatNameA
GetMessageA
BuildReasonArray
MapVirtualKeyExA
GetCursorInfo
SystemParametersInfoA
ToUnicode
SetSysColorsTemp
LoadLocalFonts
CopyAcceleratorTableA
GetCursorPos
GetProcessWindowStation
GetGuiResources
DestroyAcceleratorTable
TranslateMessage
DrawStateA
CharLowerBuffA
IsRectEmpty
ShowWindowAsync
RegisterClassExA
GetMessageTime
DrawTextA
SetClassWord
GetMenu
CloseWindow
SetWinEventHook
DrawTextExA
RegisterClassA
AnyPopup
SetFocus
CreateDialogIndirectParamA
GetRegisteredRawInputDevices
PtInRect
GetClientRect
GetInputState
GetMenuContextHelpId
GetWindowTextLengthA
CopyIcon
SwapMouseButton
DisplayExitWindowsWarnings
MapVirtualKeyExA
crtdll
_CIcos
opengl32
glBlendFunc
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE