Static task
static1
Behavioral task
behavioral1
Sample
a182ca83d195784c9b07d27dc534a7c87f46885d22efc81e472ede25069e7e1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a182ca83d195784c9b07d27dc534a7c87f46885d22efc81e472ede25069e7e1f.exe
Resource
win10v2004-20220812-en
General
-
Target
a182ca83d195784c9b07d27dc534a7c87f46885d22efc81e472ede25069e7e1f
-
Size
265KB
-
MD5
b972b70250b4ff69568e6f77e8155dc3
-
SHA1
18f23a446c7cc7efbf2f13179c6f2272629410c4
-
SHA256
a182ca83d195784c9b07d27dc534a7c87f46885d22efc81e472ede25069e7e1f
-
SHA512
73762697e09783a668e0d2229a7c53c184b00aa1b111563afe12a6bbbdc46915e3c34b344f0519c1341c77454f2a529d2478be5de8de156647058e62f2a23956
-
SSDEEP
3072:dEnyAikwldZxQQCkdMWInhoWlchGMRaf02Vdyqnt7qL78INjnidxiViTM/9pVY2G:SUJqh5iqLtP5o7gTy2RlbyAVXZ7X
Malware Config
Signatures
Files
-
a182ca83d195784c9b07d27dc534a7c87f46885d22efc81e472ede25069e7e1f.exe windows x86
5559f8c25cba9b1e16f75898cb938bf0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDCBrushColor
GetMetaRgn
GetObjectType
GetPixelFormat
GetPolyFillMode
GetRandomRgn
GetStretchBltMode
GetSystemPaletteUse
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextCharset
GetTextCharsetInfo
GetFontLanguageInfo
GetFontUnicodeRanges
user32
LoadIconA
GetWindowLongA
GetCursor
GetMenuContextHelpId
GetWindowContextHelpId
SetWindowTextA
RemovePropA
GetPropA
GetScrollPos
EndPaint
BeginPaint
GetWindowDC
WindowFromDC
GetForegroundWindow
DrawTextA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenu
EnableWindow
IsWindowUnicode
GetQueueStatus
SetFocus
GetDialogBaseUnits
CheckDlgButton
SetDlgItemTextA
GetDlgItemInt
GetDlgItem
EndDialog
MoveWindow
ShowWindow
CallWindowProcA
PostMessageA
SendMessageA
kernel32
SetEnvironmentVariableA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
SetFilePointerEx
SetStdHandle
CreateFileW
GetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
OutputDebugStringW
HeapReAlloc
LCMapStringW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetStdHandle
DeleteFileA
FindClose
FlushFileBuffers
GetDriveTypeA
GetFileType
SetFilePointer
WriteFile
IsDebuggerPresent
CloseHandle
GetLastError
QueryPerformanceCounter
GetProcessHeap
GetCurrentProcess
GetCurrentProcessId
CreateThread
GetCurrentThreadId
IsProcessorFeaturePresent
GetVersion
GetTickCount
GetModuleHandleA
GetProcAddress
LoadResource
LockResource
GlobalSize
GlobalFlags
GlobalHandle
LocalFlags
MoveFileA
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
RtlUnwind
HeapSize
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ