Static task
static1
Behavioral task
behavioral1
Sample
0acf219fcfb6e335e59b3b94c42dbdfd25842853584f4fbf0ade2df35b6d6ae2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0acf219fcfb6e335e59b3b94c42dbdfd25842853584f4fbf0ade2df35b6d6ae2.exe
Resource
win10v2004-20220812-en
General
-
Target
0acf219fcfb6e335e59b3b94c42dbdfd25842853584f4fbf0ade2df35b6d6ae2
-
Size
392KB
-
MD5
80b73da328156866e339ad31f944c360
-
SHA1
eec3cd2d2e345468b69ce73f9db1a42b81d6a56d
-
SHA256
0acf219fcfb6e335e59b3b94c42dbdfd25842853584f4fbf0ade2df35b6d6ae2
-
SHA512
ad320d176588bbbbe6496433a159aedc7477c1630d0deb02c763cc8dc17a0eee32fd343725b537f9006e690d7258c966ae249122d5418f3c6065cacb60ee19d3
-
SSDEEP
12288:2k7D2TBsNi5NLioFnV80Rn71M7MLzNtvZbhTsy0SsPdj:2ku6kRn7KazTvZbhTZ0SoV
Malware Config
Signatures
Files
-
0acf219fcfb6e335e59b3b94c42dbdfd25842853584f4fbf0ade2df35b6d6ae2.exe windows x86
92d6e0b3aeaa9fcc39032d586eee668e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
CloseHandle
TerminateProcess
WaitForSingleObject
CreateEventW
SetEvent
ResumeThread
SetThreadPriority
CreateThread
ResetEvent
OpenMutexA
DeleteFileA
SetFileAttributesA
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
LocalFree
FormatMessageW
GetModuleFileNameA
GetModuleHandleW
GetCurrentThreadId
UnmapViewOfFile
DeleteFileW
ExitProcess
GetProcAddress
GetCurrentProcess
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
WriteFile
CreateFileW
GetFileAttributesW
GetLastError
GetTempPathW
GetTempFileNameW
FlushFileBuffers
SetEndOfFile
SetFilePointer
MapViewOfFile
CreateFileMappingW
GetFileSize
FindNextFileW
GetFullPathNameA
Sleep
GetSystemInfo
MoveFileW
ReleaseMutex
CreateMutexW
OutputDebugStringW
ExpandEnvironmentStringsW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetFullPathNameW
CreateDirectoryA
WideCharToMultiByte
GetTempPathA
SetCurrentDirectoryA
CreateFileA
GetCurrentDirectoryA
FindNextFileA
FindFirstFileA
GetTimeFormatA
GetDateFormatA
FormatMessageA
MoveFileExA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetFileAttributesA
ReadFile
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
GetCurrentProcessId
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
GetFileType
SetHandleCount
LoadLibraryA
GetStartupInfoA
GetStdHandle
IsValidCodePage
GetOEMCP
GetCPInfo
HeapCreate
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
ExitThread
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
RaiseException
ReleaseSemaphore
CreateSemaphoreA
CreateEventA
VirtualAlloc
VirtualFree
MoveFileA
IsBadReadPtr
SetLastError
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
MultiByteToWideChar
GetModuleFileNameW
lstrlenW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetTempFileNameA
GetConsoleCP
CompareStringA
CompareStringW
user32
LoadStringA
IsWindow
DestroyWindow
SetWindowTextA
GetWindowTextLengthW
GetWindowTextA
wsprintfW
MessageBoxW
CharLowerW
MessageBoxA
LoadStringW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassExW
UnregisterClassA
GetClientRect
FillRect
EndPaint
PostQuitMessage
InvalidateRect
DefWindowProcW
SendMessageW
FindWindowW
CreateWindowExW
ShowWindow
SendMessageTimeoutW
PostMessageW
EnumWindows
GetWindowLongW
GetWindowThreadProcessId
UpdateWindow
BeginPaint
gdi32
GetStockObject
TextOutA
psapi
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
Sections
.text Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ