Static task
static1
Behavioral task
behavioral1
Sample
f3f2c830a8c8ee9716ec5646cdc84f60f369bb682bbed76b427e4f9e82675bc9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3f2c830a8c8ee9716ec5646cdc84f60f369bb682bbed76b427e4f9e82675bc9.exe
Resource
win10v2004-20221111-en
General
-
Target
f3f2c830a8c8ee9716ec5646cdc84f60f369bb682bbed76b427e4f9e82675bc9
-
Size
183KB
-
MD5
569e90fc7198c86603de218d1da5f466
-
SHA1
6314633a412640d908cfe14af72b9c5c3a5de064
-
SHA256
f3f2c830a8c8ee9716ec5646cdc84f60f369bb682bbed76b427e4f9e82675bc9
-
SHA512
4b4ad8e48ae44b1304a6c37625911e35d8cae62dac7223f3a1dcb0eac50960a1c717daa10d718dcbe248ecdd354ecb85e4f42207972a42f426ee9f3a8c161ade
-
SSDEEP
3072:4Un5uT/CoM20vO2YIg88ocK+JFullyxJDtvY+w/2GYB44a7Kp3UJo9e3cuYcKR:4Un5ujRMz/I8KwluJa+w/25g7Kx59en+
Malware Config
Signatures
Files
-
f3f2c830a8c8ee9716ec5646cdc84f60f369bb682bbed76b427e4f9e82675bc9.exe windows x86
2e32e1c77901faa660b370687d95e858
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
VerFindFileA
comdlg32
FindTextA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
ChooseColorA
msvcrt
atol
sprintf
__p__commode
wcschr
wcscspn
_wfopen
tolower
_errno
user32
GetClassInfoA
IsWindowVisible
GetSysColorBrush
EqualRect
SetWindowTextA
ShowWindow
GetMenuStringA
GetDCEx
GetClipboardData
SetWindowPos
CharToOemA
GetFocus
IsChild
GetMenuItemInfoA
EnumWindows
GetSysColor
GetCursor
DrawTextA
GetScrollInfo
CharLowerBuffA
GetScrollPos
MessageBoxA
GetMenuState
EnumChildWindows
GetSubMenu
GetMenuItemID
CallWindowProcA
GetClassLongA
ClientToScreen
IsDialogMessageA
CreateIcon
CreateWindowExA
EnableMenuItem
IsWindowEnabled
GetDesktopWindow
GetForegroundWindow
ShowScrollBar
BeginPaint
RegisterClassA
GetClientRect
GetDC
BeginDeferWindowPos
CreatePopupMenu
CharLowerA
EndDeferWindowPos
GetMenu
kernel32
GetCurrentProcess
GetModuleFileNameA
SetErrorMode
GlobalDeleteAtom
SetHandleCount
GetStringTypeA
GetThreadLocale
lstrcpyA
GetFileType
WriteFile
GetCurrentThreadId
VirtualAlloc
SetLastError
GetProcessHeap
lstrlenA
SetEvent
GetLocaleInfoA
GetACP
ResetEvent
lstrcatA
VirtualQuery
GetSystemDefaultLangID
SetEndOfFile
GetDiskFreeSpaceA
GetModuleHandleA
GlobalAlloc
GetStdHandle
CompareStringA
SetFilePointer
GetCurrentThread
FindResourceA
FreeResource
WaitForSingleObject
DeleteFileA
FindClose
LocalReAlloc
GetEnvironmentStrings
GetCPInfo
LoadLibraryExA
CreateEventA
HeapDestroy
GetVersion
VirtualAllocEx
MoveFileA
GetDateFormatA
ReadFile
EnumCalendarInfoA
lstrcmpiA
CreateFileA
GetVersionExA
GetOEMCP
SizeofResource
EnterCriticalSection
GetUserDefaultLCID
LoadResource
GetStringTypeW
GetTickCount
FormatMessageA
ExitProcess
FreeLibrary
SetThreadLocale
MoveFileExA
ExitThread
lstrcmpA
GlobalFindAtomA
GetFileAttributesA
LoadLibraryA
Sleep
Sections
TLS Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ