Static task
static1
Behavioral task
behavioral1
Sample
012bbf021b82d49740ac5c70782be8feb5e896ea5fef6490c1d9357015a88f1d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
012bbf021b82d49740ac5c70782be8feb5e896ea5fef6490c1d9357015a88f1d.exe
Resource
win10v2004-20220901-en
General
-
Target
012bbf021b82d49740ac5c70782be8feb5e896ea5fef6490c1d9357015a88f1d
-
Size
320KB
-
MD5
7e7dfb8ffde9aa05aca3b3684720e134
-
SHA1
46ae487cdec2f45be6bd08e6e380a843aba03ead
-
SHA256
012bbf021b82d49740ac5c70782be8feb5e896ea5fef6490c1d9357015a88f1d
-
SHA512
5186552f88e5cd193ab094f30469cfc52e5d80530421902ba3e9084899ca065ad3ad53add0fca0b42d3974cb49aa598c2f389f857e865fff3d642a1e62eea891
-
SSDEEP
6144:RotxE1nl+hOK+0OFY8gmnEADhSCeffO0WQX7YN1v+3qoMQM:gE1ntbFY8gmEADhdEFWQLpXP
Malware Config
Signatures
Files
-
012bbf021b82d49740ac5c70782be8feb5e896ea5fef6490c1d9357015a88f1d.exe windows x86
f18e23df98d0a456b45281282cc5ae6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SheSetCurDrive
SHGetSpecialFolderLocation
SHGetFileInfoW
user32
SendDlgItemMessageA
GetDlgCtrlID
GetWindowPlacement
DefFrameProcA
DlgDirSelectComboBoxExW
InvertRect
CreateWindowStationW
LoadCursorA
DefFrameProcW
CallNextHookEx
TabbedTextOutW
SetMenuDefaultItem
DefDlgProcW
MessageBoxA
IntersectRect
GetClassWord
LoadIconA
CallMsgFilterA
wsprintfW
GetClipboardSequenceNumber
WinHelpA
FindWindowExA
GetFocus
SetUserObjectInformationA
DdeClientTransaction
SetCursorPos
RegisterClassW
CreateDialogIndirectParamW
EndTask
CharUpperBuffW
RegisterClassA
SetActiveWindow
GetMenuCheckMarkDimensions
DefWindowProcA
CountClipboardFormats
DragObject
CharLowerBuffW
ChangeMenuW
DlgDirSelectExW
BlockInput
SetRectEmpty
GetWindow
LoadStringW
ReleaseCapture
GetNextDlgGroupItem
ShowWindow
SetSystemCursor
IsCharAlphaNumericA
CreateMenu
CreateWindowExA
DdeSetUserHandle
GetClassLongW
DestroyWindow
RemovePropW
OemToCharBuffW
IsZoomed
GetCursorPos
GetTitleBarInfo
SetFocus
DrawTextW
SetMenuItemBitmaps
GetSystemMetrics
AnimateWindow
UnloadKeyboardLayout
RegisterClassExA
comctl32
ImageList_Copy
ImageList_DrawIndirect
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_SetFilter
CreateStatusWindowW
ImageList_SetDragCursorImage
ImageList_LoadImageW
ImageList_GetImageInfo
InitCommonControlsEx
CreateToolbarEx
ImageList_DragMove
ImageList_SetIconSize
ImageList_ReplaceIcon
CreateToolbar
ImageList_GetFlags
GetEffectiveClientRect
gdi32
PolyBezierTo
GetBkMode
GetObjectA
CreateDCA
GetTextExtentPoint32W
DeleteObject
GetDeviceCaps
DeleteDC
kernel32
LCMapStringA
QueryPerformanceCounter
UnhandledExceptionFilter
WideCharToMultiByte
GetTimeZoneInformation
ReadConsoleInputW
WaitForMultipleObjects
TlsAlloc
HeapDestroy
RemoveDirectoryA
EnumResourceLanguagesA
VirtualAlloc
ExitProcess
GetStartupInfoW
GetTickCount
GetCPInfo
SetLocalTime
lstrcpynA
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
CompareStringW
GetVersion
SetLastError
GetThreadSelectorEntry
GetCurrentThreadId
DeleteFileW
RtlUnwind
OpenProcess
GetTimeFormatA
CreateMutexW
GetCurrentProcess
HeapAlloc
GetTempPathW
VirtualFree
OpenFile
SetEnvironmentVariableA
GetLocaleInfoA
IsBadWritePtr
InterlockedDecrement
SetFilePointer
GlobalUnfix
ReadFile
HeapCreate
CreateDirectoryA
ReadConsoleA
GetEnvironmentStringsW
GetCurrentThread
EnumCalendarInfoExA
DeleteCriticalSection
FlushFileBuffers
DosDateTimeToFileTime
GetStartupInfoA
OpenMutexA
OutputDebugStringW
GetEnvironmentStrings
lstrcmpW
GetModuleFileNameW
GetStdHandle
GetStringTypeA
CompareStringA
HeapReAlloc
TerminateProcess
SetVolumeLabelA
GetSystemDefaultLangID
MultiByteToWideChar
WaitForMultipleObjectsEx
GetThreadLocale
FreeEnvironmentStringsW
LCMapStringW
RemoveDirectoryW
CreateProcessA
TlsGetValue
LoadLibraryA
VirtualQuery
FreeEnvironmentStringsA
CloseHandle
GetFileType
SetStdHandle
GetModuleHandleA
SetHandleCount
CreateMailslotW
FileTimeToLocalFileTime
MoveFileA
GetFileSize
EnumDateFormatsA
GetDiskFreeSpaceExA
TlsFree
InterlockedExchange
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapFree
GetProcAddress
GetStringTypeW
TlsSetValue
GlobalHandle
lstrcpynW
FindFirstFileA
InterlockedIncrement
GetCommandLineW
GetCurrentProcessId
GetLocalTime
SetLocaleInfoW
CreateMailslotA
GetModuleFileNameA
EnterCriticalSection
InterlockedExchangeAdd
CreateMutexA
GlobalGetAtomNameW
GetLastError
GetSystemTime
WriteFile
LoadLibraryExW
GetCommandLineA
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ