Static task
static1
Behavioral task
behavioral1
Sample
aa8f0376ff4d3b8a22f57c6dd125211d9cef84fe3c2c3d301ba4f14c71356eaf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa8f0376ff4d3b8a22f57c6dd125211d9cef84fe3c2c3d301ba4f14c71356eaf.exe
Resource
win10v2004-20220812-en
General
-
Target
aa8f0376ff4d3b8a22f57c6dd125211d9cef84fe3c2c3d301ba4f14c71356eaf
-
Size
116KB
-
MD5
a36e3984a8e41a5fbd2408cde1234160
-
SHA1
60fa9188c21aa59dceb3481be2543d61b60ce9ea
-
SHA256
aa8f0376ff4d3b8a22f57c6dd125211d9cef84fe3c2c3d301ba4f14c71356eaf
-
SHA512
1cb18214c2f9f161b2a335c14de322baa35745d6589200963c1a724e307c704094a924af19f21397a304a47fe3e37423a42b1fe70bce6629035fabc97b189fd2
-
SSDEEP
1536:qD6EcbB8tMGeo49jKxgdAHCnIq5OWKekvoZR/ryeBrvP61q:q6Ecb7rPKOsCnIq5jJ/rFBji1q
Malware Config
Signatures
Files
-
aa8f0376ff4d3b8a22f57c6dd125211d9cef84fe3c2c3d301ba4f14c71356eaf.exe windows x86
99b1192fc70aeef81c0a1311a0dfb9b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
QueryPerformanceCounter
CompareFileTime
GetStartupInfoW
GetCurrentProcessId
GetCurrentProcess
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetModuleHandleA
VirtualAlloc
LCMapStringA
GetOEMCP
SetEvent
TerminateProcess
FreeLibrary
FlushFileBuffers
GetStringTypeA
CreateEventA
ExitProcess
SizeofResource
CompareStringW
FileTimeToLocalFileTime
FormatMessageW
TlsAlloc
GetStdHandle
LoadLibraryExW
LeaveCriticalSection
SetFilePointer
LocalFree
GetProcessHeap
InterlockedExchangeAdd
WaitForSingleObject
InterlockedExchange
SetHandleCount
GetSystemInfo
GlobalAlloc
ReadFile
GetEnvironmentStringsW
LocalAlloc
GetFileType
GetFileSize
MultiByteToWideChar
GetEnvironmentStrings
GlobalLock
CreateThread
GetVersionExW
ResetEvent
GetStringTypeW
FreeEnvironmentStringsW
WriteFile
FindNextFileW
GetFileAttributesA
SetStdHandle
GetVersionExA
TlsSetValue
HeapAlloc
LCMapStringW
HeapSize
RtlUnwind
Sleep
HeapFree
IsValidCodePage
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
GetLocaleInfoW
LoadLibraryW
SetConsoleCtrlHandler
EnterCriticalSection
FatalAppExitA
GetSystemTimeAsFileTime
GetTickCount
HeapDestroy
HeapCreate
GetLastError
SetLastError
TlsFree
TlsGetValue
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetModuleFileNameA
GetModuleFileNameW
DecodePointer
GetModuleHandleW
GetProcAddress
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
HeapSetInformation
GetCommandLineA
HeapReAlloc
user32
GetKeyState
SetMenuItemBitmaps
GetDlgItemTextW
ExitWindowsEx
GetActiveWindow
SetRect
DestroyWindow
EnableMenuItem
MessageBeep
IsIconic
UnhookWindowsHookEx
SetWindowPos
SetFocus
PostMessageW
BeginPaint
SetCursor
CallNextHookEx
InvalidateRect
LoadStringA
GetWindowLongA
GetSysColorBrush
PostQuitMessage
KillTimer
ClientToScreen
CharNextA
GetDesktopWindow
TrackPopupMenu
EmptyClipboard
DrawIcon
GetMenuItemInfoA
CreatePopupMenu
IntersectRect
DefWindowProcA
GetClientRect
UpdateWindow
EndDialog
LoadCursorA
SetCapture
DestroyMenu
DrawIconEx
GetSystemMenu
GetMenuDefaultItem
GetWindowDC
MoveWindow
GetMenuStringW
SetForegroundWindow
CharNextW
DispatchMessageA
GetParent
EndPaint
SendDlgItemMessageA
TranslateMessage
SetWindowTextW
CheckMenuItem
PeekMessageA
SetCursorPos
GetCapture
SetActiveWindow
ShowWindow
CloseClipboard
GetWindowTextW
GetSubMenu
wsprintfA
GetSystemMetrics
SetParent
GetWindowRgn
SendMessageW
DefWindowProcW
CreateWindowExW
GetDCEx
SetWindowLongW
LoadStringW
GetMenuState
LoadIconA
SetMenuItemInfoW
ScreenToClient
SetWindowLongA
GetFocus
GetDlgItem
GetWindowTextA
GetMessagePos
ReleaseDC
IsWindowVisible
ShowWindowAsync
IsWindowUnicode
MessageBoxA
IsChild
GetMenuStringA
DrawTextW
RegisterClassW
SetClipboardData
EnableWindow
ReleaseCapture
SetTimer
LoadIconW
DialogBoxParamA
GetMenuItemInfoW
GetDlgItemInt
GetMessageW
FillRect
CreateWindowExA
ole32
CoCreateGuid
OleRun
OleLoadFromStream
OleInitialize
msi
ord50
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ