Static task
static1
Behavioral task
behavioral1
Sample
019b2a66006c326d261ade50a2e4aed331e531b419403d0a6e8eb8a14ca0eb08.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
019b2a66006c326d261ade50a2e4aed331e531b419403d0a6e8eb8a14ca0eb08.exe
Resource
win10v2004-20220812-en
General
-
Target
019b2a66006c326d261ade50a2e4aed331e531b419403d0a6e8eb8a14ca0eb08
-
Size
877KB
-
MD5
6fa47590d9775faba493d03f854f1409
-
SHA1
053a88df646c94abb5409e715f2cbb26c3592e44
-
SHA256
019b2a66006c326d261ade50a2e4aed331e531b419403d0a6e8eb8a14ca0eb08
-
SHA512
99ed880e97e8dd6b95916866741227a365b2c6a09943fdfdcdf356ac4ba422521fbec8c9710cdffbc7c299c2f3824213ec7f8c26f6881acb285567c05085603b
-
SSDEEP
24576:6HChmRG5bv+s/t6vBu4cVN8bVEAShMm6K:s4SG5bv+sf4xSeK
Malware Config
Signatures
Files
-
019b2a66006c326d261ade50a2e4aed331e531b419403d0a6e8eb8a14ca0eb08.exe windows x86
80da629a3b542c59656ba48af7c53c39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
ole32
CoUninitialize
CoTaskMemFree
kernel32
TerminateProcess
WaitForSingleObject
HeapDestroy
GetFileAttributesW
FreeEnvironmentStringsA
GetStdHandle
ReleaseMutex
GetCurrentThread
GetCurrentProcessId
GetVersion
GetCurrentThreadId
GetModuleHandleA
GetTickCount
GetLastError
GetCommandLineA
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
IsValidCodePage
GetEnvironmentStrings
GetModuleHandleW
GlobalLock
GetACP
FindFirstFileA
ReadFile
SetFilePointer
MapViewOfFile
RaiseException
lstrlenW
GetCurrentDirectoryA
GetCommandLineW
LockResource
SizeofResource
RemoveDirectoryA
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
InterlockedIncrement
CreateFileA
GetFileType
CreateEventA
CreateFileW
CreateEventW
SetEvent
ExpandEnvironmentStringsA
FindFirstFileW
CompareStringA
lstrcpyA
FindNextFileW
CompareStringW
GetProcAddress
DeleteFileW
GetCPInfo
GetEnvironmentVariableA
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
WriteConsoleW
GetLocaleInfoA
VirtualQuery
WriteConsoleA
SetUnhandledExceptionFilter
DeleteCriticalSection
SetEnvironmentVariableA
MulDiv
CreateThread
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
GetOEMCP
SetFileAttributesA
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteFile
InterlockedExchange
GetSystemTimeAsFileTime
GetStringTypeA
WideCharToMultiByte
GetTempPathA
GetLocaleInfoW
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetConsoleMode
GetCurrentProcess
GetFileAttributesA
user32
DispatchMessageA
PostQuitMessage
SetWindowPos
GetClientRect
DrawTextA
IsWindowVisible
EnableMenuItem
GetKeyState
GetSysColor
MessageBoxA
ScreenToClient
GetDlgItem
SetTimer
GetSubMenu
CheckMenuItem
SetWindowTextA
SetWindowLongA
GetWindowRect
EndPaint
DefWindowProcA
SetFocus
FillRect
CreateWindowExA
GetWindowLongA
RegisterClassA
IsIconic
SetForegroundWindow
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
UpdateWindow
DestroyWindow
ReleaseDC
GetCursorPos
GetDC
ClientToScreen
IsWindow
Sections
.text Size: 846KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ