Static task
static1
Behavioral task
behavioral1
Sample
a0f2ee79a90b85b4f6ef4a5ab8b2700631da5ae2ae0f3ef448923cfb019aca06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0f2ee79a90b85b4f6ef4a5ab8b2700631da5ae2ae0f3ef448923cfb019aca06.exe
Resource
win10v2004-20220901-en
General
-
Target
a0f2ee79a90b85b4f6ef4a5ab8b2700631da5ae2ae0f3ef448923cfb019aca06
-
Size
97KB
-
MD5
6b691bcb7a3a073d984aa481e06d2cb5
-
SHA1
f60dfcccd1664e9cfe9f7ca2c9abe1f5885d9cbd
-
SHA256
a0f2ee79a90b85b4f6ef4a5ab8b2700631da5ae2ae0f3ef448923cfb019aca06
-
SHA512
25644774894699fd25b1af7603bdd19eef9ecf866124b85c103ae55039c107e0e636e877004426c0feb02307069f483905f4887abcd5e2b09976e74f50b35def
-
SSDEEP
1536:o8YG+Yl6rhROR1d7EOAVHKK1LFE4J/n+KOLzCEPZEDIStEuOPCuTJolo4naeb:dfPGOkHtLFE4p+6EPuiKuTJoa4naeb
Malware Config
Signatures
Files
-
a0f2ee79a90b85b4f6ef4a5ab8b2700631da5ae2ae0f3ef448923cfb019aca06.exe windows x86
79abf76ebccaba135a066f5e0cde12eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsContentTypeA
SHQueryInfoKeyA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA
SHSetValueA
PathGetCharTypeA
SHEnumValueA
kernel32
CreateFileA
LoadLibraryA
GetProcessHeap
GetACP
LocalAlloc
MoveFileExA
WaitForSingleObject
GetCurrentProcessId
Sleep
DeleteCriticalSection
VirtualFree
GetCurrentThread
lstrcpyA
GetOEMCP
VirtualAlloc
GetFileAttributesA
ExitProcess
WideCharToMultiByte
GetStringTypeW
ExitThread
lstrlenA
FindResourceA
GetModuleHandleA
gdi32
SelectPalette
GetDCOrgEx
SetTextColor
GetRgnBox
user32
EqualRect
GetMenuItemCount
SetWindowTextA
GetFocus
EndPaint
IsWindowVisible
EnableWindow
FindWindowA
ClientToScreen
IsChild
IsWindowEnabled
DrawIcon
FillRect
GetForegroundWindow
GetClassLongA
GetLastActivePopup
GetDlgItem
GetCapture
CallNextHookEx
DrawFrameControl
GetCursor
GetSysColor
DrawIconEx
GetMessagePos
GetKeyState
BeginDeferWindowPos
GetKeyNameTextA
GetMenu
DrawMenuBar
GetActiveWindow
MessageBoxA
CreateWindowExA
GetParent
EnableScrollBar
GetScrollInfo
CreatePopupMenu
DispatchMessageW
ShowWindow
SetCursor
BeginPaint
DeferWindowPos
GetClientRect
IsMenu
CheckMenuItem
CharNextA
GetMenuItemID
HideCaret
CharToOemA
FrameRect
GetSysColorBrush
DefWindowProcA
EndDeferWindowPos
GetDCEx
GetIconInfo
ShowScrollBar
IsDialogMessageA
GetSubMenu
DefMDIChildProcA
SetWindowPos
EnableMenuItem
RegisterClassA
SetTimer
GetWindowTextA
CharLowerA
GetClassInfoA
EnumThreadWindows
TrackPopupMenu
GetWindow
GetCursorPos
CreateIcon
GetPropA
GetDC
CallWindowProcA
GetMenuItemInfoA
GetMenuState
SetWindowLongA
CharLowerBuffA
GetClipboardData
GetScrollRange
CreateMenu
GetScrollPos
EnumChildWindows
DrawEdge
DispatchMessageA
DefFrameProcA
GetDesktopWindow
ntdll
wcscat
atol
msvcrt
rand
atol
tolower
calloc
memmove
sqrt
wcstol
memcpy
_acmdln
wcschr
swprintf
srand
mbstowcs
sprintf
advapi32
GetUserNameA
RegEnumValueA
RegCreateKeyA
oleaut32
RegisterTypeLib
SysAllocStringLen
SafeArrayGetElement
SysReAllocStringLen
VariantCopyInd
SysStringLen
GetErrorInfo
SafeArrayGetUBound
VariantChangeType
version
GetFileVersionInfoSizeA
VerInstallFileA
VerQueryValueA
Sections
text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ