Static task
static1
Behavioral task
behavioral1
Sample
02bb29e5e72ea72d5e8f208f8444fa9b5f3ab35ced3b3fec329992a1460bc625.exe
Resource
win7-20220812-en
General
-
Target
02bb29e5e72ea72d5e8f208f8444fa9b5f3ab35ced3b3fec329992a1460bc625
-
Size
940KB
-
MD5
92dbcd1a9279439cb06bb0b737b5f6f0
-
SHA1
df3c3d58f67d6a4342206b904ccda060e098c189
-
SHA256
02bb29e5e72ea72d5e8f208f8444fa9b5f3ab35ced3b3fec329992a1460bc625
-
SHA512
210938b58aa5a46654d54f80b0ab4edb55541435c2f2b019e62d8bb1c24deaa026af7bd2718f1eb68672f57b64a97d97f5d3106ee5f6169ecbb647d725a696eb
-
SSDEEP
12288:cYD9viAJKSpVTqlZK8SC6Wd/rmzIxV0T3wEQSuV:cM97YSphgdJ6WwzIxo3wRF
Malware Config
Signatures
Files
-
02bb29e5e72ea72d5e8f208f8444fa9b5f3ab35ced3b3fec329992a1460bc625.exe windows x86
a03cdc8bc05e798705dcc541536ac2ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GlobalMemoryStatus
Sleep
GetTickCount
GetLocalTime
DeleteCriticalSection
LeaveCriticalSection
CreateTimerQueueTimer
DeleteTimerQueueTimer
EnterCriticalSection
InterlockedIncrement
FreeLibrary
PostQueuedCompletionStatus
CreateFileA
GetFileSize
ReadFile
CloseHandle
CompareStringA
GetSystemInfo
GetCurrentThreadId
GetModuleFileNameA
LoadLibraryA
GetCurrentProcessId
Process32Next
CreateToolhelp32Snapshot
Process32First
DebugBreak
CreateEventA
CreateThread
SetEvent
WaitForSingleObject
GetProcAddress
GetCurrentProcess
GetLastError
SetUnhandledExceptionFilter
GetQueuedCompletionStatus
CreateIoCompletionPort
SetConsoleTextAttribute
WriteConsoleA
AllocConsole
GetConsoleWindow
GetStdHandle
SetConsoleCtrlHandler
SetConsoleMode
WideCharToMultiByte
CreateSemaphoreA
GetUserDefaultLangID
MulDiv
GetTimeFormatA
GetDateFormatA
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcmpiA
QueryPerformanceCounter
ResumeThread
SuspendThread
OutputDebugStringA
QueryPerformanceFrequency
GetWindowsDirectoryA
GetCurrentThread
IsDebuggerPresent
ExitProcess
ResetEvent
InterlockedDecrement
ReleaseSemaphore
InitializeCriticalSection
lstrcpynA
MultiByteToWideChar
FlushFileBuffers
SetFilePointer
SetEndOfFile
WriteFile
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
MapViewOfFile
CreateDirectoryA
SleepEx
SetThreadPriority
FlushInstructionCache
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
ExitThread
TerminateProcess
UnhandledExceptionFilter
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CompareStringW
SetEnvironmentVariableA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetThreadLocale
GetACP
InterlockedExchange
TerminateThread
GetVersionExA
ws2_32
WSACreateEvent
WSACleanup
recvfrom
WSASetEvent
WSAGetOverlappedResult
WSAWaitForMultipleEvents
WSAResetEvent
WSACloseEvent
ntohs
inet_ntoa
WSASendTo
WSARecvFrom
WSASend
getsockopt
getpeername
accept
connect
getsockname
WSAGetLastError
setsockopt
WSARecv
WSAIoctl
shutdown
listen
WSASocketA
sendto
socket
bind
htons
gethostbyname
inet_addr
closesocket
WSAStartup
iphlpapi
GetAdaptersInfo
GetIpAddrTable
user32
SetForegroundWindow
SendMessageA
MessageBoxA
PtInRect
OffsetRect
GetDC
SetCapture
SetCursor
ReleaseCapture
GetSystemMetrics
CreatePopupMenu
AppendMenuA
ReleaseDC
CheckMenuItem
LoadIconA
GetCursorPos
ScreenToClient
TrackPopupMenu
BeginPaint
DestroyMenu
GetSysColor
IntersectRect
EndPaint
DrawIcon
InflateRect
SetRect
LoadCursorA
CopyRect
UnionRect
GetParent
RedrawWindow
AdjustWindowRect
GetWindowLongA
MoveWindow
DefWindowProcA
RegisterClassA
CreateWindowExA
DestroyWindow
PostQuitMessage
SetWindowPos
ShowWindow
UpdateWindow
GetWindowRect
GetClientRect
LoadMenuA
SetTimer
GetSubMenu
GetMenu
DrawTextA
CharNextA
GetWindowTextA
GetClassNameA
EnumChildWindows
EnableWindow
GetDlgItem
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
EndDialog
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextA
GetDlgItemTextA
DialogBoxParamA
CreateDialogParamA
GetDesktopWindow
SetWindowTextA
TranslateMessage
PeekMessageA
DispatchMessageA
IsWindow
PostMessageA
gdi32
DeleteDC
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
DeleteObject
GetNearestColor
SetPixel
GetStockObject
Ellipse
LineTo
MoveToEx
RoundRect
Rectangle
SetBkColor
TextOutA
SetTextAlign
GetDeviceCaps
CreateSolidBrush
CreatePen
SetTextColor
GetTextExtentPoint32A
BitBlt
SetBkMode
advapi32
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegisterEventSourceA
DeregisterEventSource
OpenSCManagerA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
ReportEventA
DeleteService
ControlService
OpenServiceA
CloseServiceHandle
CreateServiceA
ole32
CoCreateGuid
Sections
.text Size: 748KB - Virtual size: 747KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE