Static task
static1
Behavioral task
behavioral1
Sample
94abeeaae6c48ea16a58dbb3c6fa816e67f5a3c846f9ee7819cdf5cef102ae3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94abeeaae6c48ea16a58dbb3c6fa816e67f5a3c846f9ee7819cdf5cef102ae3f.exe
Resource
win10v2004-20220812-en
General
-
Target
94abeeaae6c48ea16a58dbb3c6fa816e67f5a3c846f9ee7819cdf5cef102ae3f
-
Size
394KB
-
MD5
a19e5dd87c73cd89144d01070ec75290
-
SHA1
37c03c0dff6b1656760f621c174c677d30e8e519
-
SHA256
94abeeaae6c48ea16a58dbb3c6fa816e67f5a3c846f9ee7819cdf5cef102ae3f
-
SHA512
a7409ecd700df1320dbe6176e9985acf98abe9e787d0d331cd1e94c27dbddf9a5a4ae5238d1e0fd015926cc844a1f7b39f390f506d8991aec822c9336d776b14
-
SSDEEP
6144:xp0ClJ6ObjD59n1p9gdNrN8M9+qoq5HAfiHqzXWG:/iUh91pSdRoq5XY5
Malware Config
Signatures
Files
-
94abeeaae6c48ea16a58dbb3c6fa816e67f5a3c846f9ee7819cdf5cef102ae3f.exe windows x86
5aed2f8eeec3948e9fd5fd6984bd8929
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc71
ord764
ord310
ord2322
ord578
ord265
ord266
ord762
msvcr71
malloc
_controlfp
free
_except_handler3
??0exception@@QAE@XZ
__CxxFrameHandler
wcscpy
swprintf
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memmove
_vsnwprintf
_vsnprintf
wcscat
_makepath
_splitpath
fclose
fread
fgetpos
fseek
fopen
strncpy
_access
sprintf
wcscmp
towupper
memset
__security_error_handler
??1type_info@@UAE@XZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
??1exception@@UAE@XZ
kernel32
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
WaitNamedPipeW
Sleep
CreateFileW
LeaveCriticalSection
ReadFile
WriteFile
EnterCriticalSection
OutputDebugStringW
OutputDebugStringA
CreateMutexA
GetPrivateProfileStringA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
FreeLibrary
GetVersionExW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
WinExec
LocalFree
GetCommandLineW
GetFileAttributesW
ExitProcess
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetVersionExA
WideCharToMultiByte
GetLastError
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
user32
FindWindowW
ShowWindow
wsprintfA
SetForegroundWindow
advapi32
SetNamedSecurityInfoA
RegQueryValueExW
RegOpenKeyExW
GetUserNameW
RegCloseKey
shell32
CommandLineToArgvW
msvcp71
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE