Static task
static1
Behavioral task
behavioral1
Sample
02fa30a6265539a76cb442004d81f665158635fae575b8874838b318cbc3aea5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02fa30a6265539a76cb442004d81f665158635fae575b8874838b318cbc3aea5.exe
Resource
win10v2004-20220812-en
General
-
Target
02fa30a6265539a76cb442004d81f665158635fae575b8874838b318cbc3aea5
-
Size
723KB
-
MD5
64989abeb9d5a8e5135df7462c30845a
-
SHA1
db617c521f3d7a7d0e87d15b512a4ba8d0c2d0fc
-
SHA256
02fa30a6265539a76cb442004d81f665158635fae575b8874838b318cbc3aea5
-
SHA512
d4ff5e2523860b45f3f37da0c583870ff3661c40bcd33c428f2306bde109be9ee3605d66d98b77ab1129c26b172a467d6839ce4f602498bd65cdee0e52c99cd1
-
SSDEEP
12288:JCC4AhX9PKXMkcTT+ESp1uLywWy8jPbmsYySNT07ir5LrpZy:lX9iBcTTHBLywWf6KSNT0uHy
Malware Config
Signatures
Files
-
02fa30a6265539a76cb442004d81f665158635fae575b8874838b318cbc3aea5.exe windows x86
7bdb8b7c5ce18fea5fc53abe7d8fe128
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Read
ImageList_LoadImageW
CreateStatusWindow
ImageList_ReplaceIcon
ImageList_DragMove
CreateToolbar
ImageList_Remove
ImageList_DragLeave
ImageList_SetFilter
ImageList_SetFlags
ImageList_GetIconSize
CreateMappedBitmap
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_Create
CreatePropertySheetPageA
ImageList_GetImageCount
DrawStatusTextA
ImageList_GetBkColor
ImageList_SetOverlayImage
user32
SendMessageTimeoutA
GetPropW
HideCaret
GetSystemMenu
DeleteMenu
FillRect
LoadIconW
SetParent
MessageBoxExW
CallMsgFilterA
SetMessageQueue
TabbedTextOutW
IsCharLowerA
SendNotifyMessageA
RedrawWindow
GetCapture
GetMenu
SetProcessWindowStation
GetActiveWindow
LoadMenuIndirectA
RegisterWindowMessageA
InflateRect
GetKeyNameTextA
SwapMouseButton
ChildWindowFromPointEx
RegisterClassA
MessageBoxW
CreateDialogParamA
GrayStringW
EnumPropsExW
ShowWindow
SetFocus
DestroyWindow
GetWindowRect
CreateWindowExA
CreateAcceleratorTableA
RegisterClassExA
UnionRect
IsChild
GetMenuItemCount
GetMenuStringA
ChangeMenuA
EndTask
LoadStringW
GetDlgCtrlID
GetProcessWindowStation
GetDlgItemTextW
ChangeDisplaySettingsW
SetSysColors
DialogBoxParamW
EndPaint
GetScrollPos
GetWindowTextW
SetDlgItemTextA
SetClassLongW
SetDoubleClickTime
DrawTextExW
GetWindowModuleFileNameA
DrawTextA
MenuItemFromPoint
DefWindowProcA
kernel32
HeapCreate
DeleteCriticalSection
GetTimeZoneInformation
lstrcpyn
CreateWaitableTimerW
CloseHandle
UnhandledExceptionFilter
HeapDestroy
WriteFile
GetStdHandle
SetFilePointer
GetOEMCP
GetCurrentProcessId
VirtualQuery
IsValidLocale
GetLastError
GetLocaleInfoA
GetVersionExA
VirtualProtect
GetLocaleInfoW
GetUserDefaultLCID
GetCPInfo
GetSystemInfo
LCMapStringA
SetLastError
LoadLibraryA
SetWaitableTimer
WritePrivateProfileStringW
GetACP
GetFileType
EnumSystemLocalesA
IsValidCodePage
EnterCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
TlsSetValue
InterlockedExchange
LCMapStringW
GetConsoleScreenBufferInfo
RtlUnwind
GetTimeFormatA
LeaveCriticalSection
FlushFileBuffers
SetEnvironmentVariableA
HeapAlloc
ReadFile
GetCurrentThreadId
GetTickCount
FreeEnvironmentStringsA
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
HeapReAlloc
CompareStringW
lstrcat
VirtualAlloc
CreateMutexA
GetCurrentThread
CreateEventW
TlsGetValue
GetCommandLineA
TlsAlloc
MultiByteToWideChar
TerminateProcess
WideCharToMultiByte
GetStringTypeA
GetStartupInfoA
ExitProcess
GetDateFormatA
GetProcAddress
VirtualFree
SetStdHandle
OpenMutexA
CompareStringA
IsBadWritePtr
SetHandleCount
GetModuleHandleA
GetCurrentProcess
GetSystemTimeAsFileTime
HeapSize
InitializeCriticalSection
CreateMailslotW
HeapFree
TlsFree
GetStringTypeW
advapi32
LookupPrivilegeNameW
RegLoadKeyA
RegEnumKeyW
StartServiceW
RegQueryMultipleValuesA
StartServiceA
DuplicateToken
ReportEventW
CryptGetHashParam
LookupAccountSidA
RegSaveKeyW
RegOpenKeyA
CryptDuplicateHash
RegDeleteKeyA
RegSetKeySecurity
CryptGetDefaultProviderA
RegSetValueW
RegLoadKeyW
CryptGetProvParam
LookupPrivilegeDisplayNameA
CryptSignHashW
CryptAcquireContextA
RegEnumKeyExA
shell32
FreeIconList
SHBrowseForFolderA
SheGetDirA
SHChangeNotify
gdi32
EnumFontFamiliesExA
GetObjectA
SetMagicColors
GetDeviceCaps
RectInRegion
DeleteDC
SelectObject
CreateDCA
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 451KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ