Static task
static1
Behavioral task
behavioral1
Sample
ba85ca02c2894678b3b2a263b63fd6ff2a26b20c19f2f856ad7e7c33166a1b14.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba85ca02c2894678b3b2a263b63fd6ff2a26b20c19f2f856ad7e7c33166a1b14.exe
Resource
win10v2004-20220812-en
General
-
Target
ba85ca02c2894678b3b2a263b63fd6ff2a26b20c19f2f856ad7e7c33166a1b14
-
Size
3.4MB
-
MD5
8316e23404313534182a4aaf6d582be6
-
SHA1
d2ef4e746135bdf2e378f505ceafb2736e3c7cfa
-
SHA256
ba85ca02c2894678b3b2a263b63fd6ff2a26b20c19f2f856ad7e7c33166a1b14
-
SHA512
40cb25693837f936d9f70eda7d05d6da40328ced5c0066cf066a041d1752800272fa0bfa3daafcfc111214a94ccb266d86c4b8166bbed54d1b1bc5990a96113d
-
SSDEEP
98304:UDZ8GqMvBam4KBcDxJgu6Dlela7r3AfWz+1EV0Dw7:UqMvIgwxSuMvr3UqkEV9
Malware Config
Signatures
Files
-
ba85ca02c2894678b3b2a263b63fd6ff2a26b20c19f2f856ad7e7c33166a1b14.exe windows x86
16ae218ee39229e071a4eca0a757afbf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
setupapi
SetupInstallFromInfSectionA
SetupOpenInfFileA
SetupDiOpenClassRegKey
SetupCloseInfFile
kernel32
GetVolumeInformationA
GetVolumePathNameA
FindVolumeClose
FindNextVolumeW
QueryDosDeviceW
FindFirstVolumeW
GetCurrentProcessId
FormatMessageW
VirtualQuery
ReleaseMutex
CreateMutexA
SetFileTime
GetFileTime
FlushFileBuffers
GetFileSize
GetFileSizeEx
GetCurrentProcess
GetVersionExA
GetCurrentDirectoryA
LockResource
GetFileAttributesA
SetFilePointer
GetCurrentThreadId
UnhandledExceptionFilter
GetSystemInfo
GetFileInformationByHandle
WaitForSingleObject
GetCurrentThread
SetUnhandledExceptionFilter
SetErrorMode
FindNextFileW
CreateFileW
FindFirstFileW
WriteConsoleA
GetLocaleInfoW
GetTimeZoneInformation
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
FindResourceA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetShortPathNameA
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFullPathNameA
HeapSize
GetStdHandle
HeapCreate
HeapReAlloc
VirtualFree
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetFileType
SetStdHandle
GetFileAttributesW
IsDebuggerPresent
TerminateProcess
GetSystemTimeAsFileTime
ExitProcess
CreateThread
ResumeThread
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
GetModuleHandleW
VirtualAlloc
VirtualProtect
InterlockedExchange
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
SetEnvironmentVariableA
LoadResource
SizeofResource
FreeLibrary
IsDBCSLeadByte
FormatMessageA
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpiA
GetDriveTypeA
CreateDirectoryA
SetFilePointerEx
SetLastError
LoadLibraryA
MoveFileA
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
SetCurrentDirectoryA
CopyFileA
LocalFree
FindFirstFileA
FindClose
CreateFileA
Sleep
DeviceIoControl
RemoveDirectoryA
DeleteFileA
GetModuleFileNameA
CreatePipe
SetHandleInformation
CreateProcessA
ReadFile
CloseHandle
WriteFile
GetModuleFileNameW
GetEnvironmentStrings
LoadLibraryExA
lstrlenA
GetModuleHandleA
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CompareStringA
CompareStringW
GetLocaleInfoA
user32
AppendMenuA
GetSystemMenu
CharNextA
MessageBoxA
wsprintfW
PostMessageA
MessageBoxW
SystemParametersInfoW
GetClassInfoA
SendDlgItemMessageW
TrackMouseEvent
ExitWindowsEx
GetKeyState
EnumChildWindows
GetDlgCtrlID
GetClassNameA
LoadCursorA
SetCursor
DefDlgProcA
UnregisterClassA
LoadIconA
RegisterClassA
LoadBitmapA
SetWindowLongA
CallWindowProcA
GetWindowLongA
GetWindowTextW
GetSystemMetrics
GetWindowInfo
GetDC
MessageBeep
GetClientRect
SetWindowPos
GetWindowTextA
DestroyWindow
GetWindowRect
CreateDialogParamW
MapDialogRect
MoveWindow
BeginPaint
FillRect
EndPaint
ReleaseDC
GetWindowTextLengthA
SetDlgItemTextA
SetWindowTextA
ShowWindow
SetWindowTextW
SetFocus
EndDialog
DialogBoxParamW
EnableWindow
EnumWindows
SendMessageA
SendMessageW
SendDlgItemMessageA
GetParent
GetDlgItem
InvalidateRect
AppendMenuW
gdi32
GetCurrentObject
GetObjectA
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
DeleteDC
BitBlt
CreateCompatibleDC
SetMapMode
GetDeviceCaps
GetTextExtentPoint32W
GetTextMetricsA
SelectObject
CreateSolidBrush
SetTextColor
SetBkColor
SetTextAlign
TextOutW
SetBkMode
GetStockObject
CreateFontIndirectW
DeleteObject
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegQueryValueExA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService
CloseServiceHandle
DeleteService
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
ChangeServiceConfigA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
StartServiceA
CreateServiceA
shell32
SHGetPathFromIDListA
SHChangeNotify
SHGetFolderPathA
SHGetSpecialFolderPathA
ShellExecuteA
SHBrowseForFolderW
SHGetMalloc
ord680
SHGetSpecialFolderLocation
ole32
CoInitialize
CoUninitialize
CoCreateInstance
PropVariantClear
OleInitialize
OleUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
VarUI4FromStr
shlwapi
SHStrDupW
Sections
.text Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 837KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ