Static task
static1
Behavioral task
behavioral1
Sample
2a6181078cf28150102f379d982015ea43353cb95fd8219c39b638f8072ef3b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a6181078cf28150102f379d982015ea43353cb95fd8219c39b638f8072ef3b5.exe
Resource
win10v2004-20220812-en
General
-
Target
2a6181078cf28150102f379d982015ea43353cb95fd8219c39b638f8072ef3b5
-
Size
827KB
-
MD5
b65aaaf5318fd1402d4e381ce4707b25
-
SHA1
b0d1fb730e638cbde36014b29a3045a385472a6d
-
SHA256
2a6181078cf28150102f379d982015ea43353cb95fd8219c39b638f8072ef3b5
-
SHA512
fb2fd0763df0d789797da537c81bb060f79cbd5f088d4aea7b0d503ae7c872e8d2b00308329799ab9090157566529ef03037e366325fcd10c2b2d4f10b848271
-
SSDEEP
12288:i2DlwCyM0g96a+7/lC4GtS38gp9WvYFF+CAxXaXYQqgsgyr3k22IwKrOW8TWJ+18:b5bIg9UlCvS3mvYXPoFgb22IbrOFh18
Malware Config
Signatures
Files
-
2a6181078cf28150102f379d982015ea43353cb95fd8219c39b638f8072ef3b5.exe windows x86
e28f6798a88f1d446a0e9de871899792
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetLastError
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
VirtualFree
FindResourceW
HeapCreate
IsValidCodePage
TlsGetValue
SizeofResource
GetACP
lstrcpynA
CloseHandle
ReadFile
TlsFree
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
WritePrivateProfileStringA
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
GetConsoleCP
lstrlenA
LCMapStringW
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
WaitForMultipleObjects
RemoveDirectoryA
FindFirstFileW
ResetEvent
lstrcpyA
FindFirstFileA
CreateProcessA
WriteFile
CompareStringW
GetSystemInfo
GetProcAddress
DeleteFileW
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersion
TlsAlloc
QueryPerformanceCounter
SetEvent
LoadLibraryW
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
LeaveCriticalSection
SetEndOfFile
GetConsoleMode
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
GetLocalTime
MultiByteToWideChar
UnhandledExceptionFilter
SetHandleCount
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
InitializeCriticalSection
FormatMessageW
LocalFree
GetOEMCP
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
SetStdHandle
FreeEnvironmentStringsW
LoadLibraryExW
LocalAlloc
GetLocaleInfoA
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
GetFileAttributesW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetVersionExA
GetCurrentThread
user32
LoadCursorA
ScreenToClient
GetDlgItem
CreateWindowExA
CheckMenuItem
SetWindowLongA
SetCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
PostMessageA
SetFocus
FillRect
SetTimer
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
IsWindowEnabled
TranslateMessage
LoadIconA
EnableWindow
ShowWindow
UpdateWindow
GetParent
PtInRect
GetClientRect
GetCursorPos
GetDC
DispatchMessageA
IsWindow
SetWindowPos
ReleaseDC
PostQuitMessage
SetForegroundWindow
IsWindowVisible
InvalidateRect
wsprintfA
DrawTextA
CallWindowProcA
SetCursor
TrackPopupMenu
SendMessageA
GetDesktopWindow
EndDialog
PeekMessageA
SystemParametersInfoA
gdi32
CreateSolidBrush
DeleteDC
GetDeviceCaps
SetBkColor
GetStockObject
msvcrt
_exit
free
_cexit
_controlfp
exit
Sections
.text Size: 785KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ