Static task
static1
Behavioral task
behavioral1
Sample
a2f5a833fb68893fdda0ffb541bfda2eb2d2c3f782c7c0a501ee1503e22f0b4c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a2f5a833fb68893fdda0ffb541bfda2eb2d2c3f782c7c0a501ee1503e22f0b4c.exe
Resource
win10v2004-20220812-en
General
-
Target
a2f5a833fb68893fdda0ffb541bfda2eb2d2c3f782c7c0a501ee1503e22f0b4c
-
Size
712KB
-
MD5
67969532739ce808112bfd975b7aefa0
-
SHA1
b627fcbb1bcbf291cf1abc1191be48bf4114e99c
-
SHA256
a2f5a833fb68893fdda0ffb541bfda2eb2d2c3f782c7c0a501ee1503e22f0b4c
-
SHA512
e4b793b5499a76461fae5845591f30af48678096537741f233829ae14aa374581c507356754cf80b463a6587eac8a768794ffd2b43a6c72b8fbae49e50c18285
-
SSDEEP
12288:vdxBgyPoceuO/XeiDAIf9D8CYUD9iX+OJayAGHmwboG3HgFf16ZSsPd3:vdzAXeiDAIf9D8hUD5OAyVGwboG3HgFm
Malware Config
Signatures
Files
-
a2f5a833fb68893fdda0ffb541bfda2eb2d2c3f782c7c0a501ee1503e22f0b4c.exe windows x86
fcb206306e81077a2f2de67b04c3fcec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
IsBadWritePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
VirtualFree
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapCreate
HeapDestroy
PeekNamedPipe
GetFileInformationByHandle
CreateDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetProfileStringA
GetEnvironmentVariableA
GetACP
HeapSize
TerminateProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
HeapReAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapAlloc
HeapFree
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFullPathNameA
MoveFileA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
SetErrorMode
SizeofResource
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
GlobalFree
GlobalAlloc
GetCurrentThread
lstrcmpA
CloseHandle
LoadLibraryA
FreeLibrary
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
InterlockedExchange
lstrcpynA
LocalFree
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
InterlockedDecrement
InterlockedIncrement
SetFileAttributesA
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetModuleFileNameA
DeleteFileA
GetPrivateProfileStringA
ReleaseMutex
CreateMutexA
GetLastError
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetVersion
LCMapStringW
GetVersionExA
user32
PtInRect
SetTimer
KillTimer
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadStringA
PostQuitMessage
CreateDialogIndirectParamA
EndDialog
GetClassNameA
LoadCursorA
ReleaseCapture
GetDCEx
LockWindowUpdate
SetCapture
SetParent
MapWindowPoints
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
TrackPopupMenu
SetRectEmpty
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetWindowPlacement
IntersectRect
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
DestroyMenu
MessageBoxA
SetWindowRgn
IsIconic
DrawIcon
GetSystemMenu
RedrawWindow
PeekMessageA
TranslateMessage
DispatchMessageA
LoadImageA
DrawStateA
GetClientRect
FrameRect
InflateRect
OffsetRect
DrawFocusRect
GetWindowRect
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
GetMenuItemInfoA
SetRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
IsMenu
SendMessageA
GetWindowLongA
DestroyCursor
EnableWindow
GetSubMenu
GrayStringA
GetMessageA
ValidateRect
GetCursorPos
LoadIconA
UpdateWindow
SendDlgItemMessageA
TabbedTextOutA
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DefDlgProcA
CharNextA
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
FillRect
DrawEdge
IsWindowUnicode
CreateWindowExA
gdi32
SetTextColor
SetBkColor
CreateBitmap
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
GetStockObject
CreatePatternBrush
SetRectRgn
StretchDIBits
GetCharWidthA
CreateFontA
GetTextMetricsA
Escape
PatBlt
ExtTextOutA
TextOutA
GetObjectA
GetPixel
SetPixel
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
RectVisible
PtVisible
Ellipse
GetTextExtentPoint32A
GetTextExtentPoint32W
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
CreatePen
GetDeviceCaps
GetTextExtentPointA
CreateDIBitmap
GetBkMode
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
shell32
SHFileOperationA
ShellExecuteExA
comctl32
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
ord17
winmm
timeGetTime
Sections
.text Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ