Static task
static1
Behavioral task
behavioral1
Sample
8fa81c2bce89adcb1cc246761775ebbf29cbc444be78c7a58a465f76f1cdf6c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8fa81c2bce89adcb1cc246761775ebbf29cbc444be78c7a58a465f76f1cdf6c8.exe
Resource
win10v2004-20220901-en
General
-
Target
8fa81c2bce89adcb1cc246761775ebbf29cbc444be78c7a58a465f76f1cdf6c8
-
Size
162KB
-
MD5
1a71c0d355affb90a54603698780a37d
-
SHA1
d3d848de5ce582edb92c1c9f0908d625282c6b0f
-
SHA256
8fa81c2bce89adcb1cc246761775ebbf29cbc444be78c7a58a465f76f1cdf6c8
-
SHA512
75b1d317ede674ef2525cb9a354ac3f7b7cc26ff2e2647428ac0f6b2bca1fc50f923ec6e1f0c8339f465e6f7770dc529131616390bc2aad4f9340ee7f6e23764
-
SSDEEP
3072:t9tn3jZWVtutKFE0SFHc2iBlHAjsbQfhHVerP3zeBzd3An1YgCQSPH96PHNrD5o1:R39W2AsHEBOeqhHV+3zeBzJAn3ClH96D
Malware Config
Signatures
Files
-
8fa81c2bce89adcb1cc246761775ebbf29cbc444be78c7a58a465f76f1cdf6c8.exe windows x86
874cc28998cbcd887ea96c698a7aca0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WideCharToMultiByte
FreeLibrary
GetModuleHandleA
GetFullPathNameA
MultiByteToWideChar
lstrcpyA
GetProcAddress
AreFileApisANSI
GetLastError
LoadLibraryA
GetModuleFileNameA
GlobalAlloc
CreateMutexA
lstrlenW
GetFileAttributesA
InterlockedDecrement
GetStartupInfoA
CreateProcessA
SetLastError
GlobalFree
GetCurrentProcess
GetACP
GetOEMCP
VirtualProtect
LocalFree
OutputDebugStringA
lstrlenA
lstrcpynA
user32
IsWindowVisible
GetDlgCtrlID
SetWindowTextA
SetForegroundWindow
DrawTextA
GetSystemMetrics
IsWindow
UpdateWindow
SendMessageA
FillRect
SetCapture
GetWindowRect
GetWindowTextA
TabbedTextOutA
PtInRect
GrayStringA
DefWindowProcA
EnumChildWindows
GetParent
EnableWindow
GetSystemMenu
GetKeyboardLayout
GetDoubleClickTime
IsWindowEnabled
IsZoomed
OffsetRect
ReleaseCapture
SetRect
gdi32
AnimatePalette
AngleArc
AddFontMemResourceEx
RectVisible
LPtoDP
SetRectRgn
BitBlt
TextOutA
CreateFontIndirectA
DPtoLP
CreatePolygonRgn
GetTextColor
CombineRgn
Polyline
CreatePalette
CreateRectRgn
PtInRegion
GetObjectA
SetPixel
PtVisible
advapi32
CryptDecrypt
CryptDestroyHash
LsaClose
RegCloseKey
RegOpenKeyExW
CryptDeriveKey
RegOpenKeyExA
RegDeleteValueA
RegDeleteValueW
CryptEncrypt
RegEnumValueA
CryptAcquireContextA
LsaOpenPolicy
EqualSid
CryptReleaseContext
RegEnumValueW
RegCreateKeyExA
FreeSid
RegCreateKeyExW
CryptCreateHash
CryptDestroyKey
RegSetValueExW
LsaFreeMemory
RegQueryValueExW
IsTextUnicode
RegQueryValueExA
RegDeleteKeyW
RegOpenCurrentUser
RegEnumKeyW
CryptHashData
RegSetValueExA
RegOpenKeyW
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
ole32
CoInitialize
CLSIDFromProgID
StringFromCLSID
CoCreateInstance
CoTaskMemFree
CoUninitialize
comctl32
_TrackMouseEvent
InitCommonControlsEx
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
oledlg
OleUIBusyW
psapi
GetModuleBaseNameA
msvcrt
calloc
_mbscmp
__set_app_type
_CIcos
_XcptFilter
_initterm
_vsnprintf
_onexit
??1type_info@@UAE@XZ
_controlfp
__CxxFrameHandler
?terminate@@YAXXZ
__setusermatherr
free
__p__commode
_mbsicmp
__getmainargs
_strdup
__p__fmode
_setmbcp
_except_handler3
_splitpath
_adjust_fdiv
_CxxThrowException
exit
_exit
_acmdln
__dllonexit
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ