Static task
static1
Behavioral task
behavioral1
Sample
a0e3012469e311703c367ab48c15193f9406aa4026e40ed46de966c1cbd4e266.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
a0e3012469e311703c367ab48c15193f9406aa4026e40ed46de966c1cbd4e266.exe
Resource
win10v2004-20220310-en
General
-
Target
a0e3012469e311703c367ab48c15193f9406aa4026e40ed46de966c1cbd4e266
-
Size
603KB
-
MD5
dac91ccf0929071e9db5b75be0f6a3a6
-
SHA1
466b804c1c95145f7a5d06cee956610c16951372
-
SHA256
a0e3012469e311703c367ab48c15193f9406aa4026e40ed46de966c1cbd4e266
-
SHA512
ac17c66d673306603d4d5c5bde77131e09fd754f4367006f85abf846303a03ac65d356ee6151afc1b696ba23d6d9446410760187ed236e01633590ac3753ea69
Malware Config
Signatures
Files
-
a0e3012469e311703c367ab48c15193f9406aa4026e40ed46de966c1cbd4e266.exe windows x64
672df4b1910dfeb166aa52ea03b66d27
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
Sleep
ExitProcess
HeapQueryInformation
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetACP
IsValidCodePage
GetStdHandle
HeapSetInformation
HeapCreate
HeapReAlloc
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapFree
GetStartupInfoA
GetCommandLineA
HeapAlloc
SetErrorMode
CreateFileA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcessId
CloseHandle
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
GetModuleHandleA
LoadLibraryA
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
lstrlenA
MultiByteToWideChar
VirtualAlloc
GetCurrentProcess
GetProcAddress
GetModuleHandleExA
GetFileAttributesA
FindResourceA
LoadResource
LockResource
SizeofResource
FreeEnvironmentStringsA
WideCharToMultiByte
user32
LoadCursorA
GetSysColorBrush
DestroyMenu
GetWindowThreadProcessId
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
GetParent
SendMessageA
MessageBeep
GetWindowRect
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
UnregisterClassA
SetWindowLongA
CallWindowProcA
EnableWindow
LoadIconA
GetSystemMenu
AppendMenuA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
SetFocus
IsWindow
IsWindowEnabled
GetFocus
RegisterWindowMessageA
GetWindow
GetSystemMetrics
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
GetMenu
GetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
WinHelpA
gdi32
DeleteDC
CreateBitmap
GetStockObject
TextOutA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathRemoveFileSpecW
PathFindExtensionA
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ