Static task
static1
Behavioral task
behavioral1
Sample
2a4f590a7cfc7b523b951770711bdcce047c52bc30eccaf28d2d51bcc65c09bb.exe
Resource
win7-20220812-en
General
-
Target
2a4f590a7cfc7b523b951770711bdcce047c52bc30eccaf28d2d51bcc65c09bb
-
Size
3.1MB
-
MD5
839bd69d08704d7be4e0ddeb16fdd866
-
SHA1
b7c2ab1cfe9334f3ebc450ddcc462be9518442e6
-
SHA256
2a4f590a7cfc7b523b951770711bdcce047c52bc30eccaf28d2d51bcc65c09bb
-
SHA512
0621f941838fcb89f6f65b1d7c0985d228c8ef5b5de41ada7a1623b31efc7445c60e55629fa66f62ba2410baf9c3767301329002ca0a3942c141378eef9236dc
-
SSDEEP
98304:Q3IwCQcaR6D2BGJkHkg8BeQCkAvTCCu9ne:mCQnRc24e8BvAvTCCuA
Malware Config
Signatures
Files
-
2a4f590a7cfc7b523b951770711bdcce047c52bc30eccaf28d2d51bcc65c09bb.exe windows x86
c898ffa149b68c035e718ea611433ed4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetVersionExA
GetVersion
CompareStringA
GetTimeZoneInformation
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetDriveTypeA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
RemoveDirectoryA
MoveFileA
RtlUnwind
DeleteFileA
SetEnvironmentVariableA
CreateDirectoryA
HeapCompact
TerminateProcess
ExitProcess
GetFileAttributesA
SetFileAttributesA
HeapFree
HeapAlloc
GetCurrentProcess
MoveFileExA
GetUserDefaultLangID
GetModuleHandleA
FormatMessageA
CopyFileA
SetFileTime
OpenFile
SetErrorMode
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTickCount
GetFullPathNameA
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
GetTempPathA
GetShortPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
CompareStringW
CreateProcessA
Sleep
GetExitCodeProcess
lstrcatA
lstrlenA
WinExec
LoadLibraryA
GetProcAddress
FreeLibrary
GetDiskFreeSpaceA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CloseHandle
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetLastError
FindFirstFileA
FindClose
GetWindowsDirectoryA
IsBadWritePtr
GetSystemDirectoryA
user32
IsIconic
PostQuitMessage
DefWindowProcA
AdjustWindowRectEx
PostMessageA
ExitWindowsEx
CheckDlgButton
GetMessagePos
MapWindowPoints
SetTimer
KillTimer
DialogBoxParamA
BringWindowToTop
GetLastActivePopup
GetWindow
SendMessageA
FindWindowA
RegisterClassA
EndDialog
GetSysColor
ScreenToClient
GetWindowRect
GetDlgItem
EndPaint
BeginPaint
GetClientRect
FillRect
DrawTextA
GetSystemMetrics
SendDlgItemMessageA
GetFocus
GetDlgItemTextA
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
IsDlgButtonChecked
CheckRadioButton
SetFocus
GetParent
UpdateWindow
IsWindowVisible
InvalidateRect
CreateDialogParamA
RedrawWindow
PeekMessageA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetDlgItemTextA
SetWindowTextA
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExA
GetWindowLongA
IsWindowEnabled
CallWindowProcA
ValidateRect
SetWindowLongA
GetClassNameA
MessageBoxA
EnableWindow
LoadCursorA
SetCursor
wsprintfA
LoadIconA
gdi32
CreatePalette
SetBkColor
ExtTextOutA
GetSystemPaletteEntries
CreateFontIndirectA
RemoveFontResourceA
GetStockObject
GetDeviceCaps
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
RealizePalette
SelectPalette
CreateHalftonePalette
CreateDIBPatternBrush
CreateSolidBrush
SetBrushOrgEx
SetStretchBltMode
StretchDIBits
SetTextColor
AddFontResourceA
SetBkMode
comdlg32
GetOpenFileNameA
advapi32
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
shell32
DragQueryFileA
DragFinish
ShellExecuteA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
DragAcceptFiles
ole32
CoGetMalloc
CoCreateInstance
OleInitialize
OleUninitialize
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerFindFileA
comctl32
ord17
ImageList_LoadImageA
Sections
.text Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE