Static task
static1
Behavioral task
behavioral1
Sample
a8a76af5543d5e2664961bc7892408b510fff62fbb4f7c6ffa92fb8aff2aca40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8a76af5543d5e2664961bc7892408b510fff62fbb4f7c6ffa92fb8aff2aca40.exe
Resource
win10v2004-20220812-en
General
-
Target
a8a76af5543d5e2664961bc7892408b510fff62fbb4f7c6ffa92fb8aff2aca40
-
Size
532KB
-
MD5
a05aa70194136f0822fe35ea5ac5002a
-
SHA1
2d754b3f48e94553c8cdb00b183c9678dd85a78c
-
SHA256
a8a76af5543d5e2664961bc7892408b510fff62fbb4f7c6ffa92fb8aff2aca40
-
SHA512
fcd73795f9c605e08c81a55f9a0b45d1634c503eb93df4ff849ac06b2bf8badad8aed6cc091ed82946b2515fa8ec1025a18d3c9076b735271ca0d060a384023e
-
SSDEEP
12288:yGO/suRiquPGgpXd6eybCqAk3ohfjzWigR:zuRi1ugpXd+bClZHWiS
Malware Config
Signatures
Files
-
a8a76af5543d5e2664961bc7892408b510fff62fbb4f7c6ffa92fb8aff2aca40.exe windows x86
ebc8e90ed3d5020748d41bc0c7c46c20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
DefWindowProcA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetUserObjectInformationA
RegisterClassA
DestroyWindow
kernel32
InterlockedDecrement
CompareStringA
FlushFileBuffers
GetOEMCP
FreeEnvironmentStringsW
GetConsoleOutputCP
CreateThread
InterlockedExchange
DeleteCriticalSection
GetConsoleMode
EnumCalendarInfoExW
GetVersionExA
HeapSize
GetProcAddress
GetTimeFormatA
GetACP
CreateFileA
ExitProcess
GetCurrentThread
GetCPInfo
SetComputerNameW
GetPrivateProfileSectionNamesA
HeapFree
LoadLibraryW
WriteConsoleOutputAttribute
HeapReAlloc
VirtualAlloc
GlobalFree
GetDateFormatA
GetCurrentThreadId
VirtualQuery
WaitForMultipleObjects
EnterCriticalSection
GetLastError
CreatePipe
WriteConsoleW
IsValidLocale
SetConsoleCtrlHandler
HeapDestroy
IsValidCodePage
VirtualFree
GetStringTypeW
TerminateProcess
FindFirstFileW
SetHandleCount
Sleep
OpenMutexA
GetProcAddress
WriteFile
GetConsoleCP
CloseHandle
GetEnvironmentStringsW
QueryPerformanceCounter
TransmitCommChar
GetStartupInfoA
SetUnhandledExceptionFilter
LocalSize
GetLocaleInfoA
GetFileType
TlsGetValue
GetLocaleInfoW
GetSystemTimeAsFileTime
SetFilePointer
CreateMailslotA
FreeEnvironmentStringsA
LeaveCriticalSection
GetCurrentProcess
ReadFile
GetWindowsDirectoryA
InitializeCriticalSection
TlsAlloc
LockResource
LoadResource
GetAtomNameA
CompareStringW
SetEnvironmentVariableA
GetTickCount
InterlockedIncrement
CreateMutexA
EnumResourceLanguagesW
GetCommandLineA
HeapCreate
IsDebuggerPresent
WriteConsoleA
GetStringTypeA
TlsFree
GetUserDefaultLCID
HeapAlloc
ReadConsoleInputW
GetProcessHeap
UnhandledExceptionFilter
TlsSetValue
LoadLibraryA
LCMapStringA
RtlUnwind
MultiByteToWideChar
GetEnvironmentStrings
SetLastError
GetTimeZoneInformation
FillConsoleOutputCharacterW
GetModuleFileNameA
LCMapStringW
GetModuleHandleA
SetStdHandle
FreeLibrary
GetCurrentProcessId
EnumSystemLocalesA
GetStdHandle
WideCharToMultiByte
comctl32
ImageList_Merge
DrawInsert
DrawStatusTextA
ImageList_Copy
InitMUILanguage
ImageList_DragEnter
ImageList_GetIcon
ImageList_SetDragCursorImage
CreateMappedBitmap
ImageList_Replace
ImageList_SetFilter
InitCommonControlsEx
CreatePropertySheetPage
ImageList_DragShowNolock
ImageList_GetFlags
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 238KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ