Static task
static1
Behavioral task
behavioral1
Sample
a04fe6f1bc771baf1bad3dc21baa3628d9ddaba415fcf343a5cb98875bffcb33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a04fe6f1bc771baf1bad3dc21baa3628d9ddaba415fcf343a5cb98875bffcb33.exe
Resource
win10v2004-20220812-en
General
-
Target
a04fe6f1bc771baf1bad3dc21baa3628d9ddaba415fcf343a5cb98875bffcb33
-
Size
114KB
-
MD5
8217474a3aac711dfb504a1328b7d643
-
SHA1
ca4de2f2e11febf2cef94d0d2437d47d6013f188
-
SHA256
a04fe6f1bc771baf1bad3dc21baa3628d9ddaba415fcf343a5cb98875bffcb33
-
SHA512
9840b4e177802c52a21ada2593255f5dc2c366d8e50030e3c5f3f99f9e4eea7a94c2c2e1f96d2e49f474299857ca966d5c72545fda74ae2ff68e2c9d75d11d5a
-
SSDEEP
1536:3MffMtfXcvb+QzYh5tRJ8QW5uS4dtqTvSRYsawz1HEEwxKgbCSIG4Djq8ferIw1:cfUAb+7t+vaYzO1H8cgbALrK71
Malware Config
Signatures
Files
-
a04fe6f1bc771baf1bad3dc21baa3628d9ddaba415fcf343a5cb98875bffcb33.exe windows x86
a8d39339f675358e58f0d2638372e9df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
MoveFileA
CreateFileA
GetLastError
RemoveDirectoryA
WriteFile
OutputDebugStringA
GetLocalTime
GlobalFree
GlobalAlloc
SetFilePointer
ReadFile
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
CreateProcessA
GetPrivateProfileIntA
CloseHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
VirtualAlloc
HeapFree
WaitForSingleObject
FreeLibrary
GetPrivateProfileStringA
FindFirstFileA
DeleteFileA
lstrcatA
FindNextFileA
FindClose
SetFileAttributesA
CopyFileA
GetDriveTypeA
GetWindowsDirectoryA
GetSystemDirectoryA
CreateDirectoryA
SearchPathA
lstrcpynA
GetShortPathNameA
LoadLibraryA
lstrlenA
GetProcAddress
Sleep
GetCurrentProcess
GetVersionExA
SetCurrentDirectoryA
lstrcpyA
GetExitCodeProcess
VirtualFree
HeapCreate
HeapDestroy
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetFileAttributesA
GetCurrentDirectoryA
GetFullPathNameA
HeapAlloc
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
SetEndOfFile
user32
SetTimer
MessageBoxA
FindWindowA
ExitWindowsEx
BringWindowToTop
EndDialog
CreateDialogParamA
DestroyWindow
GetDlgItem
DefWindowProcA
KillTimer
LoadIconA
LoadStringA
LoadCursorA
RegisterClassExA
wsprintfA
PostQuitMessage
CreateWindowExA
DialogBoxParamA
ShowWindow
UpdateWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SendMessageA
gdi32
GetStockObject
advapi32
RegCloseKey
LookupPrivilegeValueA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
RegEnumValueA
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
AdjustTokenPrivileges
comctl32
ord17
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiDeleteDeviceInfo
SetupDiCallClassInstaller
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 859B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ahgdlbu Size: 29KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE