Static task
static1
Behavioral task
behavioral1
Sample
a0c24c5d7eeeb43b7a5d31b6e45a00b06fd222f502dcafce3e8f6dc6e37f5fb8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0c24c5d7eeeb43b7a5d31b6e45a00b06fd222f502dcafce3e8f6dc6e37f5fb8.exe
Resource
win10v2004-20220812-en
General
-
Target
a0c24c5d7eeeb43b7a5d31b6e45a00b06fd222f502dcafce3e8f6dc6e37f5fb8
-
Size
772KB
-
MD5
9e47a6726166b10c5fe3ce9f3af30f1a
-
SHA1
18f3146898ff818a4e0f961ac8e5ff25e7dd6e93
-
SHA256
a0c24c5d7eeeb43b7a5d31b6e45a00b06fd222f502dcafce3e8f6dc6e37f5fb8
-
SHA512
d39f70e44d411a3120e4f4cb157ae87ba9c69f08fec3d4ceb78b3ddadb002ece48da0b60bda81d8fec084afb0a83c8b91402b2969b97ad2599bda7d50c09ffe2
-
SSDEEP
12288:plUsS4Kh2iAHNN5QryhOvSAl+CxhCacmgsNq2NbfvrNYR5Poms:p2sSiHNN54Y6CjBstbfY5k
Malware Config
Signatures
Files
-
a0c24c5d7eeeb43b7a5d31b6e45a00b06fd222f502dcafce3e8f6dc6e37f5fb8.exe windows x86
8a3d18ee53ededdf7190aca12c105f57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
GetLocaleInfoW
RtlUnwind
TlsGetValue
HeapDestroy
TerminateProcess
GetUserDefaultLCID
GetStringTypeW
GetModuleHandleA
GetTempPathW
GetOEMCP
GetLocaleInfoA
WriteFile
ReadFile
FreeEnvironmentStringsA
GetCPInfo
GetCurrentProcessId
GetStdHandle
GlobalFree
WaitCommEvent
GetVersionExA
SetLocaleInfoA
InitializeCriticalSection
VirtualProtect
CloseHandle
HeapCreate
SetConsoleOutputCP
GetProcAddress
LCMapStringW
GetCurrentThread
GetCurrentProcess
LoadLibraryA
EnumSystemLocalesA
HeapAlloc
HeapReAlloc
IsValidLocale
ExpandEnvironmentStringsA
SetThreadLocale
ReadConsoleA
UnhandledExceptionFilter
GetLastError
GetTimeFormatA
SetEnvironmentVariableA
GetACP
WideCharToMultiByte
LCMapStringA
LoadLibraryExA
SetStdHandle
OpenMutexA
GetCurrentThreadId
GetFileType
DeleteCriticalSection
ExitProcess
CreateNamedPipeW
EnterCriticalSection
InterlockedExchange
VirtualQuery
GetSystemInfo
WritePrivateProfileSectionW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsAlloc
SetFilePointer
GetNumberFormatA
FreeEnvironmentStringsW
GlobalHandle
TlsFree
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
GetTickCount
HeapFree
VirtualFree
FlushFileBuffers
GetStartupInfoA
CompareStringA
CreateMutexA
GetTimeZoneInformation
SetLastError
IsValidCodePage
GetStringTypeA
CompareStringW
SetHandleCount
GetCommandLineA
HeapSize
SystemTimeToTzSpecificLocalTime
GetPrivateProfileSectionW
TlsSetValue
GetDateFormatA
SetConsoleTitleA
LeaveCriticalSection
VirtualAlloc
wininet
CreateUrlCacheGroup
FtpCommandA
FtpPutFileA
ReadUrlCacheEntryStream
FindNextUrlCacheEntryA
GetUrlCacheEntryInfoA
InternetWriteFileExA
user32
CreateWindowExW
GetTitleBarInfo
SendIMEMessageExW
GetPropA
RegisterClassExA
DestroyWindow
WinHelpA
BroadcastSystemMessage
ShowWindow
DialogBoxIndirectParamA
SetClipboardViewer
GetMenuCheckMarkDimensions
CreateMenu
DdeNameService
DefWindowProcA
CharToOemW
MsgWaitForMultipleObjectsEx
WINNLSEnableIME
MessageBoxW
GetClassInfoW
IsCharAlphaNumericW
FreeDDElParam
GetFocus
GetKeyboardType
RegisterClassA
SetDeskWallpaper
DlgDirListW
comctl32
CreateToolbarEx
InitCommonControlsEx
CreateStatusWindowW
GetEffectiveClientRect
ImageList_SetIconSize
ImageList_Copy
ImageList_EndDrag
ImageList_SetFilter
comdlg32
GetFileTitleW
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 408KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ