Static task
static1
Behavioral task
behavioral1
Sample
d0eef166cacc308bc9350d9ac2736f238ffb946f426e539134249ec18367bb65.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d0eef166cacc308bc9350d9ac2736f238ffb946f426e539134249ec18367bb65.exe
Resource
win10v2004-20220812-en
General
-
Target
d0eef166cacc308bc9350d9ac2736f238ffb946f426e539134249ec18367bb65
-
Size
123KB
-
MD5
6d570564cc4ed6af150dcce4bac0fcb5
-
SHA1
f001ee80106c94dda2493be2705abdfdb08ea818
-
SHA256
d0eef166cacc308bc9350d9ac2736f238ffb946f426e539134249ec18367bb65
-
SHA512
0e23493912356e7195384c4a95b75d97b50982a64ddc1003c83e53c89302d5c702468dfa978325f06502d36f8c73ab659513d5c5cea2d180aaaeee4b5a947679
-
SSDEEP
1536:ZbfKh9svfmz8lLByg2hAJ1rRN11QcFy5c3ej+Sbaidk5GSCnDsx:ewmLgUuFEnai25GSCDsx
Malware Config
Signatures
Files
-
d0eef166cacc308bc9350d9ac2736f238ffb946f426e539134249ec18367bb65.exe windows x86
484065bfa5f6c31e7341041fdc162639
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hid
HidD_FreePreparsedData
HidD_GetAttributes
HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_SetNumInputBuffers
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
wininet
DeleteUrlCacheEntryA
urlmon
URLDownloadToFileA
comctl32
ord17
kernel32
GetProcessHeap
SetEndOfFile
ExitProcess
WaitForSingleObject
GetTickCount
TerminateThread
Sleep
GetPrivateProfileStringA
GetLocalTime
WritePrivateProfileStringA
OutputDebugStringA
CloseHandle
DeleteFileA
CreateThread
CreateFileA
WriteFile
CreateEventA
ReadFile
GetOverlappedResult
GetLastError
ResetEvent
GetVersionExA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
IsValidCodePage
MoveFileA
HeapFree
HeapAlloc
GetFileAttributesA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
GetCommandLineA
GetStartupInfoA
RaiseException
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
SetHandleCount
GetFileType
RtlUnwind
MultiByteToWideChar
SetFilePointer
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
CreateDirectoryA
user32
GetWindowInfo
SendMessageA
GetDlgItem
EndDialog
DestroyWindow
SetWindowTextA
UpdateWindow
EnableWindow
DialogBoxParamA
MoveWindow
MessageBoxA
GetDesktopWindow
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ