Static task
static1
Behavioral task
behavioral1
Sample
2a0af44882a0b6bedb7f054b76a95735cc680511fd396ae14bd9e2b076bab381.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2a0af44882a0b6bedb7f054b76a95735cc680511fd396ae14bd9e2b076bab381.exe
Resource
win10v2004-20220414-en
General
-
Target
2a0af44882a0b6bedb7f054b76a95735cc680511fd396ae14bd9e2b076bab381
-
Size
264KB
-
MD5
578ac3fe0df90112226441f97d3e2538
-
SHA1
c78c19c7b4f79c80e4ae3aa2b09b546102f2f78d
-
SHA256
2a0af44882a0b6bedb7f054b76a95735cc680511fd396ae14bd9e2b076bab381
-
SHA512
d8dc0fb2c530b99a37e57a4542b191997b3ad0590a4ee6a85945ecd5b04718c90680473b7b20a4e8883a6587188ada9766eb323c0e6f4b553f667402afb7ef7d
-
SSDEEP
6144:68f/AWC3CtUmA4GvnK6bZhY47SDHapAFzsdN:nAX3CaXvnK6bZhY4qomsdN
Malware Config
Signatures
Files
-
2a0af44882a0b6bedb7f054b76a95735cc680511fd396ae14bd9e2b076bab381.exe windows x86
a84c480a4309d7305900682a20c05417
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
GetKeyState
OffsetRect
SetWindowTextW
GetMenuItemCount
SetTimer
DestroyMenu
ShowWindowAsync
AdjustWindowRectEx
InflateRect
GetActiveWindow
MessageBeep
GetMenuStringW
DrawFocusRect
TrackPopupMenu
ReleaseDC
SetWindowLongW
RegisterClassW
kernel32
UnhandledExceptionFilter
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
RtlUnwind
GetTickCount
VirtualAlloc
GetEnvironmentStringsW
GetCommandLineA
GetCurrentThread
GetEnvironmentStrings
IsDebuggerPresent
GetProcAddress
LoadLibraryA
LocalSize
LocalReAlloc
GetVersionExA
LocalAlloc
CloseHandle
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleA
ReadFile
WaitForSingleObject
FreeLibrary
SetFilePointer
GetStdHandle
LocalFree
GetCurrentProcess
HeapReAlloc
Sleep
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
ExitProcess
WriteFile
SetEnvironmentVariableA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
SetUnhandledExceptionFilter
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSection
setupapi
SetupDecompressOrCopyFileA
Sections
.text Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ