Static task
static1
Behavioral task
behavioral1
Sample
0a4bb4aafaa93b089fb736a6d99f37ce472880a7de32b2ea093446523dbabb9b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a4bb4aafaa93b089fb736a6d99f37ce472880a7de32b2ea093446523dbabb9b.exe
Resource
win10v2004-20220812-en
General
-
Target
0a4bb4aafaa93b089fb736a6d99f37ce472880a7de32b2ea093446523dbabb9b
-
Size
104KB
-
MD5
699e2d4c64139a3c14bc7e1a43963fd0
-
SHA1
4ffa996d039ec0547f4285be2a5e952048295f10
-
SHA256
0a4bb4aafaa93b089fb736a6d99f37ce472880a7de32b2ea093446523dbabb9b
-
SHA512
2d6d01d905f55d5f4dee8767752aad05a6bf48508df98e1f7274bea662f6795553ab231d7ea0c5d8ea7687d327af719fe024a90c5ecc59a171e18234f73e248d
-
SSDEEP
3072:lEF9sAxeGkrAXRV+K0EwZwvreC0KBzMSbRryu:WFyAxev2RAKaZwCCwOz
Malware Config
Signatures
Files
-
0a4bb4aafaa93b089fb736a6d99f37ce472880a7de32b2ea093446523dbabb9b.exe windows x86
d717daee63a0f92e10c8ab48d34e3f24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
fclose
atexit
memcpy
_adjust_fdiv
_unlock
__p__fmode
__getmainargs
_acmdln
_exit
_XcptFilter
_osver
towupper
_kbhit
__set_app_type
sqrt
_open_osfhandle
_initterm
sprintf
exit
_CIsqrt
_unlink
_fullpath
__p__commode
__setusermatherr
wcstoul
puts
kernel32
EnumCalendarInfoA
GetStartupInfoA
GetFileAttributesW
CompareFileTime
CreateProcessW
GetModuleHandleA
VirtualProtect
GlobalLock
CopyFileA
GlobalReAlloc
GetFullPathNameA
RemoveDirectoryA
GetLastError
FileTimeToSystemTime
RtlUnwind
GetSystemDefaultLCID
SetFilePointer
user32
GetIconInfo
CheckMenuItem
GetWindow
EqualRect
SystemParametersInfoA
GetFocus
SetClassLongA
GetSysColorBrush
SetRect
GetTopWindow
AdjustWindowRectEx
SetScrollRange
SetWindowPos
TranslateMessage
EndDialog
SetCapture
EndPaint
GetClassNameA
MessageBeep
LoadStringA
GetSystemMetrics
GetCapture
DestroyCursor
DrawIconEx
advapi32
CopySid
RegQueryInfoKeyA
GetLengthSid
QueryServiceStatus
RegOpenKeyW
RegCreateKeyExW
DeregisterEventSource
OpenServiceW
LookupPrivilegeValueW
RegEnumKeyExA
OpenSCManagerA
OpenSCManagerW
CryptDestroyHash
oleaut32
GetErrorInfo
VariantClear
VariantCopy
SysAllocStringLen
SetErrorInfo
SysStringLen
VariantCopyInd
GetActiveObject
SysAllocStringByteLen
CreateErrorInfo
SafeArrayPtrOfIndex
SysReAllocStringLen
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ