Static task
static1
Behavioral task
behavioral1
Sample
a1176eaea0cf2e2ef010283ffd36b520d566834409277a3376a47096d8f97cde.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a1176eaea0cf2e2ef010283ffd36b520d566834409277a3376a47096d8f97cde.exe
Resource
win10v2004-20220901-en
General
-
Target
a1176eaea0cf2e2ef010283ffd36b520d566834409277a3376a47096d8f97cde
-
Size
175KB
-
MD5
8513c761688a8f8b059c38f67b7ea000
-
SHA1
b2aaa8393455bcf59832e34e9f74b0993ac3ed24
-
SHA256
a1176eaea0cf2e2ef010283ffd36b520d566834409277a3376a47096d8f97cde
-
SHA512
242aa2d04652597636e6605f6fd4439d12f6621db6024b0a25b0226f723a364172eafde112cda84ed892bada185ede69912f6e09e9e9c4cf10d7d9fcdf89af0a
-
SSDEEP
3072:BsqX2CtZU/Z27N7uorGSjfymeGgA3rRw8n1awyDnG4voMibL29p+R:u2rtZ+ZCSorGSj6LHeS8nAwyDnroH
Malware Config
Signatures
Files
-
a1176eaea0cf2e2ef010283ffd36b520d566834409277a3376a47096d8f97cde.exe windows x86
10647cc19dac06cd6e1105da6fcffbf8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ArrangeIconicWindows
IsIconic
SetSystemCursor
GetClassLongW
CreateDesktopA
MapVirtualKeyA
CreateWindowStationA
DefWindowProcW
SetDlgItemTextW
ToAsciiEx
GetWindowLongA
LoadBitmapA
SetMenu
SetWindowLongA
GetClientRect
IsWindowVisible
GetWindowRect
GetMenu
MessageBoxExA
EnableMenuItem
GetSubMenu
LoadMenuA
ScreenToClient
WindowFromPoint
ClientToScreen
RegisterWindowMessageA
CopyRect
DrawTextExA
PtInRect
CheckMenuItem
OffsetRect
SetTimer
DefWindowProcA
PostMessageA
UpdateWindow
UnregisterClassA
SetWindowRgn
IsWindow
IsRectEmpty
wsprintfA
CreateWindowExA
RegisterClassA
SetRect
DrawIcon
GetIconInfo
SetWindowTextA
TranslateMessage
PeekMessageA
DispatchMessageA
TrackPopupMenu
GetCursorPos
ReleaseCapture
SetCapture
SetCursor
InvalidateRect
LoadCursorA
GetWindowDC
LoadCursorFromFileA
GetCursor
LoadIconA
GetDesktopWindow
GetDC
ReleaseDC
EnableWindow
MessageBoxA
SendMessageA
DestroyWindow
UnregisterHotKey
ShowWindow
RegisterHotKey
GetSystemMetrics
SetForegroundWindow
shell32
ExtractIconA
Shell_NotifyIconA
DragFinish
Shell_NotifyIconW
ShellAboutW
DoEnvironmentSubstW
ShellExecuteA
kernel32
FindClose
CreateFileW
SetStdHandle
WriteConsoleW
HeapSize
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapAlloc
LoadLibraryW
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapFree
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
GetCurrentProcess
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
ReleaseMutex
IsProcessorFeaturePresent
LockResource
EnumResourceTypesW
WaitForSingleObject
GlobalUnlock
lstrcpyA
GlobalLock
GlobalHandle
WinExec
OpenFile
GlobalAlloc
LoadLibraryA
CreateThread
GetLastError
CreateEventA
SetEvent
CloseHandle
GlobalFree
GetStartupInfoA
GetModuleHandleA
GetVersionExA
GetCurrentThreadId
FindFirstFileA
lstrlenA
GetModuleFileNameA
Sleep
CopyFileA
CreateFileA
SetThreadPriority
DeleteFileA
FreeLibrary
MulDiv
GetProcAddress
GetWindowsDirectoryA
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ