Static task
static1
Behavioral task
behavioral1
Sample
29e976329322c6c62754bc151358df9c4aaa898656937bf5ff4e218e3eab6855.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29e976329322c6c62754bc151358df9c4aaa898656937bf5ff4e218e3eab6855.exe
Resource
win10v2004-20220901-en
General
-
Target
29e976329322c6c62754bc151358df9c4aaa898656937bf5ff4e218e3eab6855
-
Size
152KB
-
MD5
a2d734446dd8c097c4a8f69cc23ebaa0
-
SHA1
d5fbc7f48f2a2e26d76f48f023d9dad0971cb03b
-
SHA256
29e976329322c6c62754bc151358df9c4aaa898656937bf5ff4e218e3eab6855
-
SHA512
bb9aae14f37005c55352e5e4e8ed16887f6da2a9e7ec4e8ab607ef9bfd43e3f9f85d32648fb920d7c7a9e8c436cd56909c51137673c8d571100f911c9a1143a7
-
SSDEEP
3072:Q0SC1oWhLi5W0GRF8b2tRf2A+bagio/y5E8PVv:QvGoW8h6B+ugl/0
Malware Config
Signatures
Files
-
29e976329322c6c62754bc151358df9c4aaa898656937bf5ff4e218e3eab6855.exe windows x86
b10f916195ec7b60730f79c7fe743c67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
SetEnvironmentVariableA
EnterCriticalSection
FreeLibrary
WriteFile
ResetEvent
GetACP
WaitForMultipleObjects
CreateFileA
GetCommandLineW
LeaveCriticalSection
FindFirstFileW
GetStartupInfoA
DeleteCriticalSection
FileTimeToSystemTime
WideCharToMultiByte
SetHandleCount
HeapReAlloc
WaitForSingleObject
MultiByteToWideChar
InterlockedExchange
GetStdHandle
WaitForSingleObjectEx
GlobalAlloc
RaiseException
CreateThread
GetEnvironmentStrings
CompareStringA
GetSystemInfo
HeapFree
LocalFree
GetEnvironmentStringsW
GetModuleFileNameA
FormatMessageW
TlsSetValue
CreateFileW
TlsGetValue
CreateEventW
TryEnterCriticalSection
FreeLibraryAndExitThread
GetFileType
CloseHandle
InterlockedExchangeAdd
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
OutputDebugStringA
lstrlenW
SetEvent
CreateMutexW
VirtualAlloc
GetModuleHandleW
CompareFileTime
GetCurrentProcessId
InterlockedDecrement
GetCurrentThreadId
GetCurrentThread
QueryPerformanceCounter
GetCurrentProcess
GetModuleHandleA
InterlockedIncrement
GetStartupInfoW
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetLastError
TlsAlloc
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetOEMCP
Sleep
RtlUnwind
HeapSize
GetLocaleInfoA
CompareStringW
user32
GetSystemMetrics
gdi32
DPtoLP
CombineRgn
RestoreDC
SetPixelV
CreateCompatibleBitmap
GetMapMode
RealizePalette
GetDeviceCaps
Escape
GetObjectA
GetTextColor
SetTextAlign
SetViewportExtEx
GetSystemPaletteEntries
CreateFontIndirectA
ExcludeClipRect
SetPixel
SetRectRgn
CreateBrushIndirect
BitBlt
GetBkColor
SetStretchBltMode
GetTextMetricsW
MoveToEx
GetClipBox
GetWindowExtEx
Polyline
CreateRectRgnIndirect
Ellipse
SetBrushOrgEx
CreateHalftonePalette
SetBkColor
GetStretchBltMode
IntersectClipRect
CreateFontA
CreateRoundRectRgn
GetStockObject
SetWindowExtEx
EndDoc
GetWindowOrgEx
SetViewportOrgEx
GetTextExtentPoint32A
ExtTextOutW
ScaleViewportExtEx
SetBkMode
CreatePatternBrush
CreateDIBitmap
ExtEscape
GetRgnBox
GetObjectW
GetDIBColorTable
DeleteObject
GetPaletteEntries
GetBitmapBits
RectVisible
CreateFontW
ExtTextOutA
GetDCOrgEx
ScaleWindowExtEx
SelectObject
CreateCompatibleDC
SelectPalette
SaveDC
SetMapMode
SetDIBColorTable
GetCurrentPositionEx
PolylineTo
RoundRect
CreatePalette
SetWindowOrgEx
CreateDCA
CreatePen
StretchDIBits
UnrealizeObject
PatBlt
GetDIBits
SetTextColor
GetTextExtentPointA
ExtSelectClipRgn
DeleteEnhMetaFile
GetTextExtentPoint32W
LPtoDP
CreateBitmap
DeleteDC
SelectClipRgn
CreatePolygonRgn
ole32
CoTaskMemFree
OleInitialize
OleGetClipboard
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc
msi
ord46
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ