Static task
static1
Behavioral task
behavioral1
Sample
12ada21c37ef82e6e50d93b615956d570ecb37951958b18ea43ae5e3e6c386b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12ada21c37ef82e6e50d93b615956d570ecb37951958b18ea43ae5e3e6c386b7.exe
Resource
win10v2004-20220812-en
General
-
Target
12ada21c37ef82e6e50d93b615956d570ecb37951958b18ea43ae5e3e6c386b7
-
Size
748KB
-
MD5
8a240109819b62a8ffcc178f3f3d009e
-
SHA1
88e9c39174f9af4ce929faa85dc97aace3f46452
-
SHA256
12ada21c37ef82e6e50d93b615956d570ecb37951958b18ea43ae5e3e6c386b7
-
SHA512
4fc68e7b7c06bcf9f7bcb8a780ec80011030e28757e4fb72ed8737e40fffb142a3e0f7805255edd65dc3f6defc802459f2fe7420f50c156f941d4a4b9b9aefe5
-
SSDEEP
12288:QsxR2Kvp7NyxbyAY6c/VXxVosRObIrdt9CJxV73DocRbU3M41amBJs6rwSbNuuT:LRRhAA/isROgdt9UV7ZRQdblT
Malware Config
Signatures
Files
-
12ada21c37ef82e6e50d93b615956d570ecb37951958b18ea43ae5e3e6c386b7.exe windows x86
878f8f0db9c1a616c5f9a96732884fb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
GetDeviceCaps
GetStockObject
CreateCompatibleDC
SelectObject
BitBlt
CreateSolidBrush
user32
DestroyWindow
UpdateWindow
ShowWindow
EnableWindow
PeekMessageA
TranslateMessage
GetWindow
EnableMenuItem
CreateWindowExA
FillRect
SetFocus
KillTimer
GetWindowRect
ReleaseCapture
DispatchMessageA
SetWindowTextA
CheckMenuItem
GetDlgItem
LoadCursorA
TrackPopupMenu
GetDesktopWindow
SetForegroundWindow
MessageBeep
MessageBoxA
DialogBoxParamA
GetSysColor
SystemParametersInfoA
IsWindowVisible
InvalidateRect
GetClientRect
CallWindowProcA
GetFocus
SetCursor
SetWindowPos
PostQuitMessage
MoveWindow
SetWindowLongA
oleaut32
VariantClear
SysFreeString
VariantInit
advapi32
OpenProcessToken
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
GetTokenInformation
RegOpenKeyExA
RegCloseKey
RegDeleteKeyW
kernel32
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryA
GetLocaleInfoA
LocalAlloc
CreateFileA
SetErrorMode
FreeEnvironmentStringsW
SetStdHandle
GetTempPathA
HeapDestroy
lstrcmpiA
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetFileAttributesA
SetEvent
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
FindClose
InterlockedDecrement
FormatMessageA
SetLastError
GetEnvironmentVariableA
GetModuleFileNameW
IsDebuggerPresent
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
WideCharToMultiByte
GetTickCount
GetCommandLineA
GetCurrentThreadId
GetLastError
GetCurrentThread
GetVersion
GetCurrentProcessId
GetModuleHandleA
ExitProcess
VirtualAlloc
GetOEMCP
VirtualFree
UnmapViewOfFile
CreateProcessA
SizeofResource
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
CompareStringA
RaiseException
InterlockedCompareExchange
Sleep
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetEnvironmentStrings
lstrlenW
GlobalAlloc
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
lstrlenA
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateFileW
GetTimeZoneInformation
ExpandEnvironmentStringsA
WaitForMultipleObjects
ResetEvent
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileA
CreateDirectoryA
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
msvcrt
_controlfp
free
exit
_exit
Sections
.text Size: 721KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ