Static task
static1
Behavioral task
behavioral1
Sample
a8051e6a433daf449de70617f1cc5cb96d6d43b68b9398e2e6f076a728d0d473.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8051e6a433daf449de70617f1cc5cb96d6d43b68b9398e2e6f076a728d0d473.exe
Resource
win10v2004-20220812-en
General
-
Target
a8051e6a433daf449de70617f1cc5cb96d6d43b68b9398e2e6f076a728d0d473
-
Size
160KB
-
MD5
0825d4bade0827785d423ad261da6a44
-
SHA1
3f8d74dc21d8fe1162f32e32544083c08c7c2ecd
-
SHA256
a8051e6a433daf449de70617f1cc5cb96d6d43b68b9398e2e6f076a728d0d473
-
SHA512
93225403bd6f8631cc4ff0db8a93d07ebc4738794725a2f2c5d0a7dbe194552f10ef786510d52aa90c230ff9f4f534ea32666d6592b8c4fc6ce4fc3baa14f026
-
SSDEEP
3072:mPDL2avonJ2nyJUvpxkP1kAsNHuD4pmfiG9Bhbk4opmfiG9Bf:WhvKCvzkKAeyVHlJVHf
Malware Config
Signatures
Files
-
a8051e6a433daf449de70617f1cc5cb96d6d43b68b9398e2e6f076a728d0d473.exe windows x86
69a3141bc60edaa3a67cac1dae17cc78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WaitForInputIdle
TabbedTextOutA
GetWindowTextA
wsprintfA
GetCursorPos
GetWindowDC
SetCapture
DrawIcon
DeleteMenu
DrawTextW
ScrollDC
SetWindowLongA
AppendMenuW
PostMessageW
EnumWindows
RegisterClassW
GetClassWord
comdlg32
GetOpenFileNameW
shell32
SHGetPathFromIDListW
SHGetFolderPathA
SHGetPathFromIDListA
ole32
OleDestroyMenuDescriptor
CoLockObjectExternal
gdi32
TextOutW
SetStretchBltMode
Arc
SelectObject
CreateFontA
LineTo
GdiFlush
SetBkMode
EnumMetaFile
GetNearestColor
SelectClipRgn
FlattenPath
SetTextAlign
GetTextColor
SetDeviceGammaRamp
RestoreDC
FrameRgn
kernel32
VirtualFree
WriteConsoleA
InterlockedDecrement
InterlockedIncrement
GetEnvironmentStrings
GetModuleFileNameA
GetConsoleOutputCP
SetFilePointer
VirtualAlloc
LCMapStringA
GetStringTypeA
GetLocaleInfoA
CreateFileA
CompareStringA
InitializeCriticalSectionAndSpinCount
CreateNamedPipeW
GetThreadPriority
RtlCaptureStackBackTrace
GetFileAttributesExW
LocalAlloc
LocalFileTimeToFileTime
HeapCreate
LoadLibraryA
GetFileInformationByHandle
GetDriveTypeW
FindFirstFileA
EncodePointer
GetCurrentDirectoryA
HeapSetInformation
DebugSetProcessKillOnExit
CreateDirectoryW
HeapReAlloc
GetPrivateProfileStringA
GetCurrentProcessId
SystemTimeToFileTime
FormatMessageA
UpdateResourceW
LCMapStringW
GetFullPathNameW
FreeEnvironmentStringsA
GetEnvironmentVariableA
WinExec
CopyFileW
lstrcmpiW
SetEndOfFile
WriteConsoleW
FlushFileBuffers
ReadConsoleW
SetEnvironmentVariableA
GetConsoleMode
GetConsoleCP
CompareStringW
GetStringTypeW
OutputDebugStringW
SetStdHandle
HeapAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
RtlUnwind
HeapSize
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
WriteFile
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetStdHandle
GetProcessHeap
GetModuleHandleExW
ExitProcess
GetCurrentThreadId
SetLastError
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
DecodePointer
GetCommandLineW
GetLastError
RaiseException
IsDebuggerPresent
CloseHandle
CreateFileW
ReadFile
SetFilePointerEx
LoadLibraryExW
ExpandEnvironmentStringsW
DeleteFileW
QueryPerformanceFrequency
LoadLibraryExA
GetModuleHandleA
VirtualAllocEx
VirtualProtectEx
GetProcAddress
GetTempPathW
FlushInstructionCache
MultiByteToWideChar
GetModuleFileNameW
VerifyVersionInfoA
GetFileAttributesW
LoadLibraryW
WideCharToMultiByte
GetTickCount
GetModuleHandleW
SetEnvironmentVariableW
GetCurrentProcess
VerSetConditionMask
SetDllDirectoryW
FreeLibrary
GetProcessIoCounters
GetEnvironmentVariableW
GetCommandLineA
GetStartupInfoA
SetHandleCount
GetTimeZoneInformation
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ