Static task
static1
Behavioral task
behavioral1
Sample
f01a2aabbe2aeb9cebadc83766b240479772b5902ac079cb6e01c7f2dc203e14.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f01a2aabbe2aeb9cebadc83766b240479772b5902ac079cb6e01c7f2dc203e14.exe
Resource
win10v2004-20220812-en
General
-
Target
f01a2aabbe2aeb9cebadc83766b240479772b5902ac079cb6e01c7f2dc203e14
-
Size
114KB
-
MD5
d6d023dd172ece58a5e98cf0ec77cddf
-
SHA1
8c6d66b93c7182f88878a77d085c534ec938dc38
-
SHA256
f01a2aabbe2aeb9cebadc83766b240479772b5902ac079cb6e01c7f2dc203e14
-
SHA512
fa6d3815a20933dc02d76d5ae55342294236499b09387651fad138db30eb3a2b78b6c1f71d1facb68ccc0ac54f33d21a1f1bd53ce5a53f266512444af97530b9
-
SSDEEP
3072:SJ10ekCC8/lSBSN99N+FavKC4CU+RLtaVqmow:2+hCC8Qx4tUQLt6/
Malware Config
Signatures
Files
-
f01a2aabbe2aeb9cebadc83766b240479772b5902ac079cb6e01c7f2dc203e14.exe windows x86
a9a5233283fb220b80c6f2ea6d2696fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
SetEndOfFile
SetErrorMode
GetCurrentThreadId
FreeEnvironmentStringsW
RtlUnwind
RegisterWaitForSingleObject
DeleteCriticalSection
GetProcessHeap
GetSystemTimeAsFileTime
CreateFileW
GetFileSize
SetLastError
IsDebuggerPresent
CreateEventW
CreateThread
SetFilePointerEx
ExitProcess
WideCharToMultiByte
GetACP
SetUnhandledExceptionFilter
LCMapStringW
GetFileSizeEx
FreeLibrary
InterlockedIncrement
FlushFileBuffers
WaitForMultipleObjectsEx
GlobalFree
GlobalAlloc
GetFileAttributesW
DeleteFileA
GlobalAlloc
Sleep
InitializeCriticalSectionAndSpinCount
SleepEx
MultiByteToWideChar
WaitForSingleObject
HeapFree
InterlockedDecrement
InterlockedExchangeAdd
CreateFileA
GetTickCount
GetVersionExA
GetCommandLineW
HeapAlloc
SetFilePointer
CreateEventA
HeapSize
TerminateProcess
GetModuleHandleA
WriteFileEx
GetModuleFileNameA
GetCPInfo
GetEnvironmentStringsW
TlsSetValue
VirtualAlloc
TlsGetValue
LeaveCriticalSection
CloseHandle
GetCommandLineA
WaitForSingleObjectEx
SetEnvironmentVariableA
InitializeCriticalSection
GetModuleHandleW
GetLastError
GetSystemInfo
GetVersion
CompareStringW
GetStringTypeA
GetCurrentThread
SizeofResource
GetCurrentDirectoryA
WriteFile
FormatMessageW
LoadResource
TryEnterCriticalSection
LCMapStringA
UnhandledExceptionFilter
GetLocaleInfoA
GetSystemTime
GetOEMCP
FreeEnvironmentStringsA
InterlockedCompareExchange
GetCurrentProcessId
GetModuleHandleW
LoadLibraryA
GetVersionExW
GetCurrentProcess
lstrlenA
GetEnvironmentStrings
GetStartupInfoA
TlsAlloc
EnterCriticalSection
FindCloseChangeNotification
GetLocalTime
LocalAlloc
GetStringTypeW
FindClose
GetProcAddress
SetEvent
user32
GetDlgItem
ShowWindow
GetMenuItemCount
GetDC
EnableWindow
GetDCEx
SetCursorPos
GetClientRect
GetWindowRect
GetParent
GetWindowLongA
GetMenuState
GetDlgItemInt
GetWindowTextA
SendMessageA
SetWindowPos
IsWindowEnabled
LoadStringA
GetDlgItemTextA
GetSystemMetrics
MessageBoxA
GetWindowPlacement
GetDlgItemTextW
SetForegroundWindow
GetWindowTextLengthW
shlwapi
StrToIntExA
StrToIntW
PathAddBackslashW
SHDeleteKeyW
StrCmpNW
PathFileExistsW
PathCombineW
StrCmpW
StrStrW
PathAppendW
StrStrIW
msi
MsiConfigureFeatureW
MsiInstallMissingComponentW
MsiGetSourcePathW
MsiConfigureProductW
MsiGetSummaryInformationW
MsiAdvertiseProductW
MsiRecordClearData
MsiGetPropertyW
MsiCloseAllHandles
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ