Static task
static1
Behavioral task
behavioral1
Sample
0a787282f5645a62ef33572ba1a7697826a9a81b48ac340aceab151ba2f4db50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a787282f5645a62ef33572ba1a7697826a9a81b48ac340aceab151ba2f4db50.exe
Resource
win10v2004-20220812-en
General
-
Target
0a787282f5645a62ef33572ba1a7697826a9a81b48ac340aceab151ba2f4db50
-
Size
467KB
-
MD5
93705ef659ec343b59c496c5bcde2bce
-
SHA1
2fb85c088ed70e1447ce59f4fa65c2f3b466dc95
-
SHA256
0a787282f5645a62ef33572ba1a7697826a9a81b48ac340aceab151ba2f4db50
-
SHA512
d0e9f94bbe0fe3b47611f25862b451203f6d1adf23e8dd9fc6ea3f82c501aa2d117f6c4b4b32139c087f8a64b5a507832b16fe00c16f449867ff1c7d95daa91b
-
SSDEEP
12288:epAacc/WZfphotcr8uQnGO52pfWNzMhWPNgUaFXoOx/HJMXyr5cL7LeRPPo8+:pf6N8NooBN
Malware Config
Signatures
Files
-
0a787282f5645a62ef33572ba1a7697826a9a81b48ac340aceab151ba2f4db50.exe windows x86
67f6ef7617ab26d1c564a684ec3e6a64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_SetOverlayImage
DrawStatusText
ImageList_LoadImageW
DestroyPropertySheetPage
InitCommonControlsEx
CreatePropertySheetPageA
MakeDragList
comdlg32
ChooseColorA
ChooseFontA
wininet
RunOnceUrlCache
HttpSendRequestExA
UnlockUrlCacheEntryFileW
user32
RealGetWindowClass
EnumDisplaySettingsExA
SetWindowTextW
GetWindowContextHelpId
CharUpperA
FindWindowExA
GetGuiResources
RegisterDeviceNotificationW
GetMenuStringA
AnyPopup
DlgDirListA
SetDlgItemInt
ChangeMenuW
SetMenuInfo
RegisterClassExA
GetMenuInfo
RegisterClassA
gdi32
CreateDCW
GetDeviceCaps
DeleteDC
GetRgnBox
kernel32
VirtualAlloc
GetLastError
GetDateFormatA
CompareStringW
GetCurrentThread
GetTimeZoneInformation
LCMapStringA
LoadLibraryA
GetCurrentThreadId
GetStartupInfoA
GetOEMCP
IsBadReadPtr
WideCharToMultiByte
FlushFileBuffers
GetModuleFileNameA
EnumSystemLocalesW
SetConsoleCtrlHandler
WriteConsoleA
GetModuleFileNameW
SetHandleCount
lstrlenA
InterlockedExchange
EnumSystemLocalesA
TlsSetValue
IsValidLocale
GetConsoleCP
FindResourceExA
QueryPerformanceCounter
CreateNamedPipeW
HeapCreate
GetProcessHeap
GetCurrentProcess
TlsFree
GetConsoleOutputCP
VirtualQuery
TlsGetValue
EnterCriticalSection
SetFilePointer
ExitProcess
VirtualFree
HeapValidate
FreeEnvironmentStringsW
GetFileType
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
GetConsoleMode
CompareStringA
lstrcpy
RtlUnwind
SetStdHandle
CreateMutexA
IsDebuggerPresent
GetCPInfo
GetConsoleCursorInfo
CreateFileA
IsValidCodePage
RaiseException
DeleteCriticalSection
FileTimeToDosDateTime
GetLocaleInfoA
OutputDebugStringW
GetUserDefaultLCID
GetStringTypeW
UnhandledExceptionFilter
GetCurrentProcessId
GetACP
LoadLibraryW
GetTempPathA
GetProcAddress
MapViewOfFile
FindFirstFileExA
FreeEnvironmentStringsA
SetEnvironmentVariableA
GetEnvironmentStringsW
OpenMutexA
WriteConsoleW
TlsAlloc
InitializeCriticalSection
GetVersionExA
LCMapStringW
GetCommandLineA
ReadFile
GetStringTypeA
LeaveCriticalSection
GetModuleHandleA
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
GetEnvironmentStrings
MultiByteToWideChar
GetLocaleInfoW
WriteFile
SetVolumeLabelW
SetLastError
GetTimeFormatA
InterlockedIncrement
CloseHandle
HeapFree
DebugBreak
DeleteAtom
TerminateProcess
GetTickCount
GetShortPathNameW
SetVolumeLabelA
GetStdHandle
HeapDestroy
FreeLibrary
OutputDebugStringA
InterlockedDecrement
shell32
SHGetSpecialFolderPathA
DragFinish
Sections
.text Size: 317KB - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ