?BLGG@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
a0e6aeafa7eff7a99960f807506b80041c1b558b537da3ce6f871e45e224ac8a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0e6aeafa7eff7a99960f807506b80041c1b558b537da3ce6f871e45e224ac8a.exe
Resource
win10v2004-20220812-en
General
-
Target
a0e6aeafa7eff7a99960f807506b80041c1b558b537da3ce6f871e45e224ac8a
-
Size
460KB
-
MD5
a3b7870040c9be7b130fcc50c5ddacf0
-
SHA1
e0bbdec9743c482a67bdf8b4055625bd90c0c87b
-
SHA256
a0e6aeafa7eff7a99960f807506b80041c1b558b537da3ce6f871e45e224ac8a
-
SHA512
8dcc65d0dbfacf79c835d5a273508ac65bf4fb63397129d0b9f5dfefd8a6c6f3b73890084513dfd305c95730969baaebaed16837ced2401acf67b60ca9f8178c
-
SSDEEP
12288:WgBDGTIdIz72bjH9pcA4z8WuC505pUYMap:lBacSGbj0L8WuOuU
Malware Config
Signatures
Files
-
a0e6aeafa7eff7a99960f807506b80041c1b558b537da3ce6f871e45e224ac8a.exe windows x86
77f7664f60fedbd303f9a442f23abdd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CreateProcessA
GetTickCount
VirtualFree
OpenEventA
GetLastError
DeleteFileA
LoadLibraryA
ResumeThread
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
TerminateProcess
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
user32
EnableWindow
GetFocus
SetActiveWindow
DestroyWindow
LoadBitmapA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
ws2_32
send
winmm
auxOutMessage
midiStreamOut
midiOutReset
midiStreamRestart
midiInOpen
mixerGetLineInfoA
dnsapi
DnsAcquireContextHandle_A
Exports
Exports
Sections
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 853KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ