Static task
static1
Behavioral task
behavioral1
Sample
af70ffa3a1a5ed066dac74223d35d7179d9510d60f2f3c44d57dfbf46a56a3cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af70ffa3a1a5ed066dac74223d35d7179d9510d60f2f3c44d57dfbf46a56a3cd.exe
Resource
win10v2004-20220812-en
General
-
Target
af70ffa3a1a5ed066dac74223d35d7179d9510d60f2f3c44d57dfbf46a56a3cd
-
Size
187KB
-
MD5
9180c0050f61bf376a00107b3f562a00
-
SHA1
3f400956a5f2701becc39f236125b2940105b9cf
-
SHA256
af70ffa3a1a5ed066dac74223d35d7179d9510d60f2f3c44d57dfbf46a56a3cd
-
SHA512
009256d44799f665dc96ace510e2c18d2031081b59d5a42e7819aa646d783eb147d369ba34910542265d75820940960b792142919dbee0a9486ce3226cfa70b1
-
SSDEEP
3072:KtaDoSozeCdowcn72E238VPwSTL6fkPPk7V5pPeo:PDo7zeCdowY2v3OPZ7Mr
Malware Config
Signatures
Files
-
af70ffa3a1a5ed066dac74223d35d7179d9510d60f2f3c44d57dfbf46a56a3cd.exe windows x86
0b1da1d98a769aaac822b179cea1cc11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateThread
ExitThread
GetExitCodeThread
WaitForSingleObject
CloseHandle
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
GetCurrentThreadId
CreateEventA
SetEvent
OpenProcess
Sleep
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetStdHandle
GetConsoleScreenBufferInfo
CreateFileA
ReadConsoleOutputCharacterA
ReadConsoleOutputAttribute
ReadConsoleOutputA
GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
DeleteFileA
MoveFileA
SetFilePointer
GetFileSize
CreateFileA
SetEndOfFile
GetFileType
CreateDirectoryA
RemoveDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
user32
GetMessageA
PostMessageA
PostThreadMessageA
DefWindowProcA
CreateWindowExA
MessageBoxA
LoadCursorA
LoadIconA
PostQuitMessage
ShowWindow
GetSystemMetrics
UpdateWindow
GetDC
ReleaseDC
BeginPaint
GetUpdateRect
DispatchMessageA
EndPaint
RegisterClassA
TranslateMessage
CharToOemA
BroadcastSystemMessageA
SendMessageA
MessageBoxA
gdi32
Arc
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
GetPixel
GetStockObject
LineTo
Rectangle
SelectClipRgn
SelectObject
SetPixel
SetPixelV
StretchBlt
MoveToEx
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 287KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.stabstr Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ