Static task
static1
Behavioral task
behavioral1
Sample
036dc9cc7898d6656fb1681ce2c1a76235b49781cf10b0b6a3e95763b2aec8c1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
036dc9cc7898d6656fb1681ce2c1a76235b49781cf10b0b6a3e95763b2aec8c1.exe
Resource
win10v2004-20220901-en
General
-
Target
036dc9cc7898d6656fb1681ce2c1a76235b49781cf10b0b6a3e95763b2aec8c1
-
Size
245KB
-
MD5
a5d4d6646cac3580be7e775edd9a8092
-
SHA1
69b01851f2031513e2f16a0641da98b4810ec82d
-
SHA256
036dc9cc7898d6656fb1681ce2c1a76235b49781cf10b0b6a3e95763b2aec8c1
-
SHA512
0d2fb47be8d93ef3f84fefc35379314610e769bf2429dd5cb7db939d2ae2d196ad78d247ba9199e6cb15ea1008c26e0df5e383f2c2407d4f3870c053ecc0e624
-
SSDEEP
6144:roFWXW88c2CAJZ5Xq8K/mm1GIn4CQ973DQQCiecE4S0s:0bjJZ5Xq8CnJQZDQlHfJ
Malware Config
Signatures
Files
-
036dc9cc7898d6656fb1681ce2c1a76235b49781cf10b0b6a3e95763b2aec8c1.exe windows x86
e7720322bcb1a5673500db00cdc75bd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetLogicalDriveStringsA
OpenJobObjectA
HeapLock
WriteConsoleOutputCharacterW
LocalHandle
TransactNamedPipe
UnlockFileEx
GetExitCodeProcess
ReleaseSemaphore
LZInit
FindFirstVolumeMountPointW
GetThreadPriority
HeapCreate
SetMessageWaitingIndicator
GetCompressedFileSizeA
GetConsoleCommandHistoryLengthW
GetThreadSelectorEntry
GetConsoleOutputCP
GetCommandLineA
GetComPlusPackageInstallStatus
HeapWalk
OutputDebugStringA
VirtualQueryEx
CreateFileA
EnumTimeFormatsA
GetVersionExA
BuildCommDCBAndTimeoutsA
DisconnectNamedPipe
GetThreadTimes
HeapCompact
GetSystemDirectoryA
SetConsoleInputExeNameA
GetConsoleHardwareState
GetThreadPriorityBoost
GetCurrentThread
GetFileSizeEx
GetTempPathA
ExitProcess
Toolhelp32ReadProcessMemory
GetConsoleCursorInfo
HeapQueryInformation
GetVersion
ResetEvent
FindAtomA
FindFirstFileExW
GetProfileStringA
GetConsoleTitleA
EnumUILanguagesA
GetSystemTimeAdjustment
UnregisterWaitEx
GetComputerNameA
GetConsoleCursorMode
DuplicateHandle
SetFilePointer
VirtualAlloc
OpenEventA
PurgeComm
GetNumberOfConsoleFonts
GlobalDeleteAtom
EnumResourceTypesA
SetThreadPriority
SetThreadUILanguage
ReleaseMutex
user32
GetQueueStatus
MonitorFromPoint
EnableScrollBar
ShowCursor
SetWindowsHookA
GetProcessWindowStation
UpdateWindow
ShowStartGlass
CharLowerBuffA
CreateDialogIndirectParamA
LoadMenuIndirectA
CharToOemBuffA
GetTopWindow
PostThreadMessageA
GetRawInputDeviceInfoA
OpenDesktopA
GetClassLongA
EnumClipboardFormats
TranslateAccelerator
IsHungAppWindow
SubtractRect
IsWindowUnicode
AppendMenuA
MapVirtualKeyExW
DefDlgProcA
SetWindowLongA
CharLowerBuffA
CreateWindowExA
SendDlgItemMessageA
MessageBoxIndirectA
SetScrollRange
SetProcessWindowStation
ShowScrollBar
TabbedTextOutA
GetWindowWord
CreateDialogParamA
SetRect
DefFrameProcA
DestroyMenu
CreateDialogIndirectParamA
GetDesktopWindow
MessageBoxTimeoutA
GetWindowModuleFileNameA
EnableScrollBar
DialogBoxParamA
RegisterWindowMessageA
IsCharAlphaNumericA
GetSystemMetrics
InflateRect
MenuItemFromPoint
LoadKeyboardLayoutEx
GetListBoxInfo
DrawFrameControl
ReplyMessage
DrawMenuBarTemp
opengl32
glGetBooleanv
ddraw
DirectDrawCreate
d3d8
Direct3DCreate8
avifil32
AVIBuildFilter
msvfw32
VideoForWindowsVersion
Sections
CODE Size: 235KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ