Static task
static1
Behavioral task
behavioral1
Sample
a80198f16a0d4c6216bfae514f5bfe6d7e5336404de5405840a0d1da44c8dc45.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a80198f16a0d4c6216bfae514f5bfe6d7e5336404de5405840a0d1da44c8dc45.exe
Resource
win10v2004-20220812-en
General
-
Target
a80198f16a0d4c6216bfae514f5bfe6d7e5336404de5405840a0d1da44c8dc45
-
Size
166KB
-
MD5
63aa2b3939a58b1f99b795ca6cbdd490
-
SHA1
e7f455c14532e7a28a4eef306d4c53bfc4ee5bf1
-
SHA256
a80198f16a0d4c6216bfae514f5bfe6d7e5336404de5405840a0d1da44c8dc45
-
SHA512
02f7c401f3320d0fe8b43dc95e98bd24f5c4f2904d75a9cce18c7b1c73c31e59b7e65dbeafdce1c214f6c9ad6d2d263d9d963b0f3466a34f8bf06503a3f9ba40
-
SSDEEP
1536:Z6kNduqg88f+1wDk8NBIMqdx2yyQQyyyy77PMzLDY8m+RD+t006JU1V/+f4xSa9y:jgDf+1bol8DCTMHfkMRAhy+AVYM
Malware Config
Signatures
Files
-
a80198f16a0d4c6216bfae514f5bfe6d7e5336404de5405840a0d1da44c8dc45.exe windows x86
3a14830be7313dc2a32d6d5fae626513
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
GetTickCount
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
MulDiv
MultiByteToWideChar
OpenFile
GetSystemTimeAsFileTime
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GetSystemTime
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetLastError
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetAtomNameA
GetACP
FindFirstFileA
FindClose
DeleteFileA
DeleteAtom
CreateThread
CloseHandle
AddAtomA
VirtualAllocEx
GetWindowsDirectoryA
lstrcatA
QueryPerformanceCounter
CreateFileA
user32
EnableWindow
EnableScrollBar
EndPaint
EnumThreadWindows
FillRect
GetClientRect
GetClipboardData
GetDC
GetDlgItem
GetDlgItemTextA
GetKeyState
GetMenu
GetMessageA
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetTopWindow
GetWindowDC
InsertMenuA
InvalidateRect
IsClipboardFormatAvailable
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetRect
SetRectEmpty
SetScrollPos
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TranslateAcceleratorA
TranslateMessage
UpdateWindow
EnableMenuItem
EmptyClipboard
DrawTextA
DrawIcon
DrawFocusRect
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperBuffA
CharNextA
CharLowerA
BringWindowToTop
BeginPaint
EndDialog
gdi32
CreateFontIndirectA
CreateMetaFileA
DeleteObject
GetDeviceCaps
GetLayout
GetStockObject
GetTextExtentPoint32A
PatBlt
SelectObject
CopyMetaFileA
SetBkMode
SetLayout
SetTextAlign
SetTextColor
SetWindowExtEx
SetWindowOrgEx
TextOutA
TranslateCharsetInfo
SetBkColor
CloseMetaFile
advapi32
RegOpenKeyW
msvcrt
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnprintf
exit
memmove
strchr
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ