Static task
static1
Behavioral task
behavioral1
Sample
dac832f8e5790dde06b21862214bb4cbc3887725c693ef6215b3ce2f977f015e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dac832f8e5790dde06b21862214bb4cbc3887725c693ef6215b3ce2f977f015e.exe
Resource
win10v2004-20220812-en
General
-
Target
dac832f8e5790dde06b21862214bb4cbc3887725c693ef6215b3ce2f977f015e
-
Size
148KB
-
MD5
92ae186d9d857de8538ae13c5acdeab0
-
SHA1
eec6f7b3f91aa621d2dd2be7de5a19a1463eb3dd
-
SHA256
dac832f8e5790dde06b21862214bb4cbc3887725c693ef6215b3ce2f977f015e
-
SHA512
333f1717c62c93763ed92d848fa103b0b8958bfc2d1140b7cdbdf0b476d2220c31de338af616188ec0fcd50de019d4fa59c17ad75adc50bd36902d5fc9f48128
-
SSDEEP
3072:YCBwKRcv+ZLiCfCR8o/f2f1pAtKae14Gz8V/1nHjMVv:YCBxeGxfB886GATD
Malware Config
Signatures
Files
-
dac832f8e5790dde06b21862214bb4cbc3887725c693ef6215b3ce2f977f015e.exe windows x86
53b81354a45c0595d743a9728d3b1efd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
ResetEvent
WriteFile
FreeLibrary
WaitForMultipleObjects
SetEnvironmentVariableA
GetTimeZoneInformation
IsValidCodePage
CreateFileA
GetCommandLineW
LeaveCriticalSection
FindFirstFileW
DeleteCriticalSection
FileTimeToSystemTime
WideCharToMultiByte
SetHandleCount
HeapReAlloc
WaitForSingleObject
MultiByteToWideChar
InterlockedExchange
GetStdHandle
WaitForSingleObjectEx
GlobalAlloc
RaiseException
CreateThread
GetEnvironmentStrings
CompareStringA
GetSystemInfo
GetStartupInfoA
HeapFree
LocalFree
GetEnvironmentStringsW
GetModuleFileNameA
FormatMessageW
TlsSetValue
CreateFileW
TlsGetValue
CreateEventW
TryEnterCriticalSection
FreeLibraryAndExitThread
GetFileType
CloseHandle
InterlockedExchangeAdd
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
OutputDebugStringA
lstrlenW
SetEvent
CreateMutexW
VirtualAlloc
GetModuleHandleW
GetModuleHandleA
GetStartupInfoW
InterlockedDecrement
QueryPerformanceCounter
CompareFileTime
InterlockedIncrement
GetCurrentThread
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
EnterCriticalSection
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetLastError
TlsAlloc
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetOEMCP
Sleep
RtlUnwind
HeapSize
GetLocaleInfoA
CompareStringW
user32
GetSystemMetrics
gdi32
CreateSolidBrush
SetBrushOrgEx
SetTextAlign
RealizePalette
DPtoLP
CreateDCA
SelectPalette
Ellipse
Polyline
CreateFontW
CreateBrushIndirect
GetTextExtentPointA
MoveToEx
SetPixel
SetPixelV
GetDCOrgEx
GetWindowOrgEx
CreateRectRgnIndirect
ExtEscape
SaveDC
GetDeviceCaps
ExtSelectClipRgn
ExtTextOutW
CreateBitmap
GetPaletteEntries
CreatePalette
SetMapMode
CreatePen
RestoreDC
CreatePenIndirect
UnrealizeObject
CreateDIBitmap
ExtCreatePen
DeleteDC
GetDIBColorTable
GetViewportExtEx
ScaleWindowExtEx
EndDoc
SetDIBColorTable
DeleteObject
BitBlt
SelectObject
GetTextMetricsA
CreateHalftonePalette
Rectangle
SetBkMode
ExtTextOutA
GetBitmapBits
RectVisible
GetTextExtentPoint32W
GetPixel
GetStockObject
SetViewportExtEx
GetMapMode
ole32
CoTaskMemFree
OleInitialize
OleGetClipboard
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc
msi
ord46
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ