Static task
static1
Behavioral task
behavioral1
Sample
01a46f0deee5c3bbdb2ff1fb5ca5a4bbe37360c6b177d2871431e0f452f41e57.exe
Resource
win7-20220812-en
General
-
Target
01a46f0deee5c3bbdb2ff1fb5ca5a4bbe37360c6b177d2871431e0f452f41e57
-
Size
465KB
-
MD5
7cc8cb081eea1c92acd78e6a7549b680
-
SHA1
57bbc5983fe81b51d934d0b1cd1b6e7820ae75ae
-
SHA256
01a46f0deee5c3bbdb2ff1fb5ca5a4bbe37360c6b177d2871431e0f452f41e57
-
SHA512
9b6ae54ba8b83bc437a96abb21235b6a5b44c98d0806b0f5c64816173b02a3fa09bdc1c3ff33c1d96fb0922552ea060d7f4add4e572e33f426c44f7ee1b32671
-
SSDEEP
6144:Fm+79C3EA6OR+dRkgA7ZjjNlWGxGfzmoYgFG+c6BQhPNNVeI0Uhp4qr6Uy46Wjzx:379jAr+ITllGfzrc6BQxNNVnvr6wQxw
Malware Config
Signatures
Files
-
01a46f0deee5c3bbdb2ff1fb5ca5a4bbe37360c6b177d2871431e0f452f41e57.exe windows x86
62ead0ff910a51033a048f4dbbba6aa8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
CreateDirectoryA
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
LoadResource
FindResourceExA
CreateProcessA
lstrcpynA
FlushInstructionCache
GetCurrentProcess
GlobalSize
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
LoadLibraryA
WritePrivateProfileStringA
WritePrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetShortPathNameA
GetModuleFileNameA
lstrcmpiA
SetUnhandledExceptionFilter
GetCommandLineA
SizeofResource
FindResourceA
LoadLibraryExA
IsDBCSLeadByte
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
lstrcatA
RemoveDirectoryA
FindNextFileA
lstrcmpA
FindClose
FindFirstFileA
GetWindowsDirectoryA
VirtualQuery
VirtualProtect
SearchPathA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SystemTimeToFileTime
GetTempFileNameA
GlobalReAlloc
IsBadReadPtr
GetLocaleInfoW
GetOEMCP
GetACP
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
CopyFileA
ReadFile
DeleteFileA
CloseHandle
Sleep
WriteFile
SetFileTime
GetFileSize
SetFilePointer
CreateFileA
GetPrivateProfileStringA
QueryPerformanceFrequency
GetFileAttributesA
InterlockedDecrement
LocalFree
FormatMessageA
GetTickCount
lstrcpyA
lstrlenA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
GetVersionExA
CompareStringW
CompareStringA
HeapCreate
GetEnvironmentVariableA
HeapSize
TerminateProcess
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
GetCPInfo
LCMapStringW
LCMapStringA
GetTimeZoneInformation
ExitProcess
GetVersion
GetStartupInfoA
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
InterlockedExchange
WideCharToMultiByte
SetLastError
CreateMutexA
GetCurrentThreadId
GetLocalTime
ReleaseMutex
MultiByteToWideChar
ResetEvent
SetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetLastError
SetEndOfFile
SetEnvironmentVariableA
user32
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
IsWindow
LoadStringA
DispatchMessageA
wsprintfA
DefWindowProcA
DestroyWindow
RegisterClassExA
CreateWindowExA
LoadCursorA
SetWindowLongA
GetWindowLongA
GetDesktopWindow
CallWindowProcA
CharLowerBuffA
SendMessageA
GetMessageA
CharNextA
PostThreadMessageA
GetClassInfoExA
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegQueryValueA
CryptDestroyHash
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
RegCloseKey
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoInitialize
CoTaskMemFree
ProgIDFromCLSID
StringFromGUID2
CoCreateGuid
CoCreateInstance
CLSIDFromProgID
StringFromCLSID
CoTaskMemAlloc
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
oleaut32
SysAllocString
SysFreeString
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
DispCallFunc
GetErrorInfo
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
SysStringByteLen
VariantClear
SysStringLen
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
crypt32
CertCloseStore
CryptMsgClose
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE