?GamsBungBurdFard@@YGEU_GUID@@ACUShriSumsala@@ACU_SECURITY_ATTRIBUTES@@UtagLOGFONTW@@PCUTierJotsyawlZoonselat@@ULanevileSimaeposmoo@@G@Z
Static task
static1
Behavioral task
behavioral1
Sample
af9784ba819bfb5f753fca23d49d0fb33d02f8055db6514b801abe5cfa98b154.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
af9784ba819bfb5f753fca23d49d0fb33d02f8055db6514b801abe5cfa98b154.exe
Resource
win10v2004-20220812-en
General
-
Target
af9784ba819bfb5f753fca23d49d0fb33d02f8055db6514b801abe5cfa98b154
-
Size
170KB
-
MD5
79695ed4ff2fd6573a1a50d4fffd8a60
-
SHA1
a9ffddac6bc0e52cb9cf2c098819ac8a60ced48a
-
SHA256
af9784ba819bfb5f753fca23d49d0fb33d02f8055db6514b801abe5cfa98b154
-
SHA512
2e3feed877314cb85d5afbdf43acb5af7e7b6e532f29b245f92184a9030ec322967d9131e1a20dd6738871b8e02839f39cc3cfaaa6fe426a335027f0859f9c11
-
SSDEEP
3072:j1A7Wh7l93kGrjEZGcThP6/1mgP6B+IpZaEdjB3Ly2OV9tRRt:j1t93zrj4J9P6/1mgP++IprjZTaR
Malware Config
Signatures
Files
-
af9784ba819bfb5f753fca23d49d0fb33d02f8055db6514b801abe5cfa98b154.exe windows x86
783998dd28c053528237fb376d567939
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
SetCurrentDirectoryA
GetStartupInfoA
OpenFileMappingW
GetPriorityClass
MulDiv
GetSystemDefaultLangID
GetCommandLineW
GetEnvironmentVariableW
GetDriveTypeW
GlobalCompact
GetConsoleAliasExesLengthA
SetErrorMode
GetEnvironmentStringsW
GetUserDefaultLCID
GetLogicalDrives
GetSystemDefaultLCID
GetModuleHandleW
GetTickCount
GetCurrentThread
GetProcessHeap
GetDriveTypeA
GetVolumeInformationA
GetConsoleAliasExesLengthW
CreateSemaphoreA
IsDBCSLeadByte
GetEnvironmentVariableA
GetACP
FindNextVolumeMountPointW
GetConsoleOutputCP
GetLastError
IsDBCSLeadByteEx
SetLastError
lstrcmpiA
GetThreadLocale
IsValidCodePage
CreateSemaphoreW
GetModuleHandleA
GetCurrentThreadId
GetDiskFreeSpaceExW
GetVersion
GetCurrentProcessId
GetVolumeInformationW
user32
RegisterDeviceNotificationA
SetWindowTextW
AppendMenuA
SetClassLongA
IsMenu
SetCursor
SendNotifyMessageW
EndTask
SetScrollInfo
CharLowerBuffA
SetClassLongW
GetClassLongW
RedrawWindow
ToUnicodeEx
GetShellWindow
IsCharAlphaNumericA
GetWindowThreadProcessId
VkKeyScanA
GetMessageTime
GetClipboardOwner
CheckMenuItem
InSendMessage
RegisterHotKey
GetDialogBaseUnits
GetDlgCtrlID
FindWindowA
DestroyMenu
UpdateWindow
CountClipboardFormats
DdeNameService
BeginDeferWindowPos
UnhookWindowsHookEx
SetProcessDefaultLayout
FindWindowExW
SwitchDesktop
GetMenuStringA
GrayStringW
DestroyCursor
GetDlgItem
IsWindowUnicode
ChangeClipboardChain
SetUserObjectSecurity
GetClipboardData
GetWindowLongA
GetWindowLongW
BringWindowToTop
DdeUninitialize
MapVirtualKeyA
TrackPopupMenuEx
GetKeyboardLayout
SetLastErrorEx
IsCharAlphaNumericW
GetMenu
GetForegroundWindow
LockWindowUpdate
GetCapture
EnumClipboardFormats
ShowCaret
CloseDesktop
CreateMenu
SetParent
FindWindowExA
wsprintfA
IsWindowEnabled
MessageBeep
DeleteMenu
SetForegroundWindow
GetKeyState
GetLastActivePopup
IsZoomed
IsChild
IsCharAlphaA
GetMenuItemID
ImpersonateDdeClientWindow
SetActiveWindow
GetSystemMenu
VkKeyScanW
GetWindowTextLengthW
DestroyWindow
ArrangeIconicWindows
CopyAcceleratorTableW
ntdll
_aulldiv
_allshl
_aullrem
_aullshr
_allmul
Exports
Exports
Sections
.itext Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ