Static task
static1
Behavioral task
behavioral1
Sample
a7842de9435f8066eda5f7557379e509c6b7fcb888e58c2f6856879a1dedc429.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a7842de9435f8066eda5f7557379e509c6b7fcb888e58c2f6856879a1dedc429.exe
Resource
win10v2004-20230220-en
General
-
Target
a7842de9435f8066eda5f7557379e509c6b7fcb888e58c2f6856879a1dedc429
-
Size
903KB
-
MD5
9b3905c9ee3b8d9c4069d61a2cb1c8da
-
SHA1
a5e997d59b9dc311294bbafef71bc7cd4e1099c7
-
SHA256
a7842de9435f8066eda5f7557379e509c6b7fcb888e58c2f6856879a1dedc429
-
SHA512
ebcabb21a9f77a5963f6d4397a6df878405d39f8af56099365d976e77feea92a21b7a7b873e6ada6386de629e1a48dee660dff75c288d145a95e5e6416e14a2a
-
SSDEEP
24576:TjobElGZVJfcqThqxb3UDfI3OXvFQQxtntsWc+rs:Tj/
Malware Config
Signatures
Files
-
a7842de9435f8066eda5f7557379e509c6b7fcb888e58c2f6856879a1dedc429.exe windows x86
0648b4066e1a2ead2f1fca5100e9b226
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
CreateToolbarEx
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetBkColor
InitCommonControlsEx
kernel32
CloseHandle
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetComputerNameA
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
msvcrt
_strdup
_stricoll
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__p__pgmptr
__set_app_type
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_msize
_onexit
_pctype
_setmode
abort
atexit
calloc
fputc
fputs
fwrite
malloc
mbstowcs
memcpy
memmove
setlocale
signal
sprintf
strcmp
strcoll
strlen
strncmp
tolower
vfprintf
wcstombs
free
realloc
user32
AppendMenuA
CallWindowProcA
CharLowerBuffA
CharUpperA
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
ClientToScreen
CloseClipboard
CreateDialogParamA
CreatePopupMenu
DefDlgProcA
DestroyCursor
DestroyIcon
DestroyWindow
EmptyClipboard
EnableMenuItem
EndDialog
EnumClipboardFormats
GetActiveWindow
GetClassInfoA
GetClientRect
GetClipboardData
GetCursorPos
GetDlgItem
GetDlgItemTextA
GetMenu
GetMessageA
GetSubMenu
GetSysColor
GetSystemMenu
GetWindowPlacement
GetWindowRect
InsertMenuItemA
IsDialogMessageA
IsDlgButtonChecked
IsMenu
KillTimer
LoadCursorA
LoadIconA
MoveWindow
OpenClipboard
PostQuitMessage
RegisterClassA
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetClipboardData
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetMenuItemInfoA
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowTextA
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 726KB - Virtual size: 726KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 188B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE