Static task
static1
Behavioral task
behavioral1
Sample
a036d47f33c83fb53d80e56b1479f6f8bc01b351a7cb4a791f8e28c6eec4f3cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a036d47f33c83fb53d80e56b1479f6f8bc01b351a7cb4a791f8e28c6eec4f3cf.exe
Resource
win10v2004-20220901-en
General
-
Target
a036d47f33c83fb53d80e56b1479f6f8bc01b351a7cb4a791f8e28c6eec4f3cf
-
Size
665KB
-
MD5
809f0d4559df3231070ef6d0bb036ee0
-
SHA1
c20744a26d822541bf711e4debf6cba7e99a5306
-
SHA256
a036d47f33c83fb53d80e56b1479f6f8bc01b351a7cb4a791f8e28c6eec4f3cf
-
SHA512
91ff168314c4d1c5c5e257effa2c267af8aefda017f969b3982bceef045fd021de6488bad858c331859f05829afb7d52fce06c37694dd51e5beccd3a25e6f1f4
-
SSDEEP
12288:p/MUnJ4XYnq0/HHR2L6FGntjZDqx5yxcZdDrKYQ6:Dnq2HtFGntlDqx5GcTV
Malware Config
Signatures
Files
-
a036d47f33c83fb53d80e56b1479f6f8bc01b351a7cb4a791f8e28c6eec4f3cf.exe windows x86
25d36cfef972422c7efde557a96b3ac1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
RaiseException
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SetLastError
MultiByteToWideChar
ReadFile
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
FreeLibrary
LoadLibraryExW
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
MoveFileExW
LocalFree
LocalLock
FormatMessageW
WriteFile
SetFilePointerEx
SetEndOfFile
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetACP
GetVersionExW
GetFileSizeEx
lstrcpyW
SetEnvironmentVariableA
CreateThread
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
GetSystemTimeAsFileTime
CreateDirectoryW
GetCommandLineW
GetModuleHandleW
CloseHandle
GetFullPathNameW
SetCurrentDirectoryW
DeleteFileW
lstrlenW
GetDriveTypeW
GetModuleFileNameW
GetProcAddress
FindResourceExW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
GetModuleHandleA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
LCMapStringW
HeapCreate
CompareStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetModuleFileNameA
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
FindResourceW
LoadResource
LockResource
CompareStringA
SizeofResource
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
user32
EnableWindow
EndDialog
GetWindowLongW
CreateDialogParamW
CharNextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CallWindowProcW
DefWindowProcW
GetActiveWindow
DialogBoxParamW
PostQuitMessage
GetParent
ShowWindow
DestroyWindow
BeginPaint
EndPaint
KillTimer
LoadStringW
wsprintfW
MessageBoxW
GetDlgItemTextW
SetActiveWindow
IsDialogMessageW
SetTimer
MoveWindow
SetWindowLongW
SetDlgItemTextW
SetWindowTextW
GetSystemMetrics
LoadImageW
PostMessageW
GetDlgItem
SendMessageW
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
UnregisterClassA
SetWindowPos
MapWindowPoints
gdi32
SelectObject
Rectangle
GetStockObject
advapi32
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
ShellExecuteW
ole32
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
oleaut32
VarUI4FromStr
SysAllocString
SysStringByteLen
SysFreeString
shlwapi
PathFindExtensionW
PathGetDriveNumberW
PathIsUNCW
PathFileExistsW
PathAddBackslashW
comctl32
DestroyPropertySheetPage
CreatePropertySheetPageW
PropertySheetW
InitCommonControlsEx
Sections
.text Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ