Static task
static1
Behavioral task
behavioral1
Sample
a0ab32e15585c70dd9b9bf7ee83ddd120336191999fdd5465b0cad69c713104d.exe
Resource
win7-20220812-en
General
-
Target
a0ab32e15585c70dd9b9bf7ee83ddd120336191999fdd5465b0cad69c713104d.zip
-
Size
719KB
-
MD5
3df53e38f03f46aae95fa85ba82cb1a2
-
SHA1
39b2fa10c7a22a7c75dcaff374fba5c356ad0db0
-
SHA256
bce3296bbce7c60d09b4f44aeb7e5905e084ac9fd334794f058b870fe8dbd6b5
-
SHA512
9510149acf372467cba7da9768f6e8011515df0dbcb1a4dc82db82e18263dd75b41f31366ea5ba61f530f331ce7d65bc5afefefbaa233e7a3088791743fa9209
-
SSDEEP
12288:297LU9LxN84n87qeF3k8CMC8EESwad5Ue0NW8CpZL+hVh64Xnd+dKtlDT2l:s7LU9LxN82KNmM6ESfvHxv+964Xnd+d1
Malware Config
Signatures
Files
-
a0ab32e15585c70dd9b9bf7ee83ddd120336191999fdd5465b0cad69c713104d.zip.zip
Password: infected
-
a0ab32e15585c70dd9b9bf7ee83ddd120336191999fdd5465b0cad69c713104d.bat.exe windows x86
38efc825b0dbb87ad6cda4272c8614bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetModuleFileNameA
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetModuleFileNameW
GlobalFlags
LocalFree
GetCPInfo
GetOEMCP
GetModuleHandleW
WritePrivateProfileStringA
FlushFileBuffers
GetCurrentProcess
SetErrorMode
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
HeapReAlloc
Sleep
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
MulDiv
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
LoadLibraryA
SetLastError
MultiByteToWideChar
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
SetFileTime
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
lstrcatA
lstrlenA
lstrcpyA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
FlushViewOfFile
FindClose
FindFirstFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
GetTickCount64
QueryFullProcessImageNameW
OpenProcess
GetCurrentProcessId
ExitProcess
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
DeleteFileA
CloseHandle
WriteFile
CreateFileA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
user32
SetCursor
DestroyMenu
GetSysColorBrush
LoadCursorA
UnregisterClassA
ReleaseDC
GetDC
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetMessageA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
EnableWindow
SendMessageA
GetParent
GetWindowRect
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
CharUpperW
IsIconic
GetSystemMetrics
GetClientRect
wsprintfA
GetWindowThreadProcessId
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
DrawTextA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetDlgItem
gdi32
GetStockObject
DeleteDC
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
SaveDC
DeleteObject
RestoreDC
SetMapMode
SetViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
ScaleViewportExtEx
shell32
ShellExecuteA
oleaut32
VariantInit
VariantClear
VariantChangeType
SysFreeString
shlwapi
PathFindFileNameA
PathFindExtensionA
psapi
EnumProcesses
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 619KB - Virtual size: 634KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ