Static task
static1
Behavioral task
behavioral1
Sample
2a3f04f93bd176a56bb87fc1ecba62d941bcd79d16a077d79a0c0d7a461ad6e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2a3f04f93bd176a56bb87fc1ecba62d941bcd79d16a077d79a0c0d7a461ad6e9.exe
Resource
win10v2004-20220901-en
General
-
Target
2a3f04f93bd176a56bb87fc1ecba62d941bcd79d16a077d79a0c0d7a461ad6e9
-
Size
125KB
-
MD5
b99f1131127827de7c69bf24c1d01f14
-
SHA1
955a23796e3c8af756b4507a3792153396c597f2
-
SHA256
2a3f04f93bd176a56bb87fc1ecba62d941bcd79d16a077d79a0c0d7a461ad6e9
-
SHA512
6a032ed18d4851f7e28ab4fd2143b279e84badde293f0953010ff47662126b1e91546b13c100aa1b01780288f4ad52d6c8de2e4c2eb3770c7c2a3e3c707c50c2
-
SSDEEP
3072:/wMoTN77FBSoms1uDfrgZqo6+zZx3lt/YUSk1v:/wfflmpjrgZqBmZHhYUSkF
Malware Config
Signatures
Files
-
2a3f04f93bd176a56bb87fc1ecba62d941bcd79d16a077d79a0c0d7a461ad6e9.exe windows x86
fc38a811594a19532571c21560a2a65e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
lstrcmpiA
CloseHandle
GetCommandLineA
GetModuleHandleA
GetStringTypeA
GlobalFree
lstrcpynA
GetFileSize
lstrcpyA
GetLastError
HeapAlloc
lstrcatA
GetStdHandle
GetCPInfo
GetDateFormatA
DeleteFileA
GlobalAlloc
GetModuleFileNameA
user32
CopyIcon
EndDialog
DrawIconEx
AlignRects
DrawTextW
IsMenu
AppendMenuA
AppendMenuW
IsWindow
DialogBoxParamW
DrawIcon
LoadMenuA
GetDC
CalcMenuBar
GetWindowTextLengthA
BlockInput
CopyRect
IsMenu
GetDlgItem
CreateIcon
LoadMenuA
AlignRects
AppendMenuA
DialogBoxParamW
LoadCursorA
DrawTextA
AppendMenuW
CopyIcon
InsertMenuA
DialogBoxParamA
CloseWindow
IsWindow
DrawIcon
BlockInput
CopyImage
advapi32
RegQueryValueExW
RegQueryValueW
RegReplaceKeyA
RegOpenKeyExA
RegGetKeySecurity
RegLoadKeyA
RegEnumValueW
RegQueryValueExA
RegCreateKeyExW
RegFlushKey
RegEnumKeyExW
RegDeleteValueW
RegLoadKeyW
RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyW
RegOpenKeyA
comctl32
ImageList_DragMove
ImageList_DrawEx
ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_Replace
ImageList_DragEnter
ImageList_GetDragImage
ImageList_AddMasked
ImageList_Remove
ImageList_GetImageCount
ImageList_Merge
ImageList_LoadImageA
ImageList_EndDrag
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Read
Sections
.KAmUID Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.oqASX Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NKvu Size: 1KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dlLlei Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ