Static task
static1
Behavioral task
behavioral1
Sample
1a7fa2f4eb5bef9153581e88342a335b1158785f240f2555fc2dc3b37c3717e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1a7fa2f4eb5bef9153581e88342a335b1158785f240f2555fc2dc3b37c3717e0.exe
Resource
win10v2004-20220812-en
General
-
Target
1a7fa2f4eb5bef9153581e88342a335b1158785f240f2555fc2dc3b37c3717e0
-
Size
294KB
-
MD5
81d468fd98ce149176ab48e9c3f34600
-
SHA1
44f2e306824835260ea178a31d19b83fd4f9cf0d
-
SHA256
1a7fa2f4eb5bef9153581e88342a335b1158785f240f2555fc2dc3b37c3717e0
-
SHA512
7ad637f023c43f93a94592d615c4758f1b8771ba04e85ea2996085f277be1f6cb273d5425c7501d46fb44240a2fcc10f9c6358a3fe76ea1ff32b60a7a2b59c45
-
SSDEEP
6144:6vL8M2PlJGUQlf5hP9SiOal/P87MxDrM9ng7X:6IEUQlf5U4H87M9rMy
Malware Config
Signatures
Files
-
1a7fa2f4eb5bef9153581e88342a335b1158785f240f2555fc2dc3b37c3717e0.exe windows x86
c0e029879e1803604aad28ec2ac478b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
DeleteFileA
MoveFileExA
GlobalFree
GetLocalTime
FreeLibrary
lstrcmpiA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
CreateMutexA
CloseHandle
IsBadWritePtr
OutputDebugStringA
HeapFree
SetEndOfFile
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
lstrcmpA
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
ReadFile
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapSize
GetStdHandle
WriteFile
ExitProcess
HeapReAlloc
HeapCreate
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
WideCharToMultiByte
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
GetCurrentProcess
SetLastError
RaiseException
InitializeCriticalSection
GetCurrentThreadId
DeleteCriticalSection
lstrlenW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetLastError
lstrlenA
MultiByteToWideChar
InterlockedDecrement
GetLocaleInfoA
InterlockedIncrement
IsDebuggerPresent
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualProtect
InterlockedExchange
Sleep
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
InterlockedCompareExchange
user32
UnregisterClassA
IsWindow
SetWindowPos
SendMessageA
RegisterClassExA
LoadCursorA
DefWindowProcA
SetWindowLongA
GetClientRect
GetParent
GetWindowLongA
PostMessageA
GetDesktopWindow
ReleaseDC
GetDC
InvalidateRect
CallWindowProcA
InvalidateRgn
FillRect
ReleaseCapture
SetCapture
MoveWindow
ScreenToClient
ClientToScreen
CreateAcceleratorTableA
DestroyAcceleratorTable
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
IsIconic
GetWindowRect
SystemParametersInfoA
GetSystemMetrics
CreateDialogParamA
PostQuitMessage
wsprintfA
SetTimer
KillTimer
ShowWindow
IsDialogMessageA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
BeginPaint
EndPaint
IsChild
GetFocus
SetFocus
GetWindow
GetDlgItem
GetClassNameA
GetSysColor
CharNextA
RedrawWindow
GetClassInfoExA
CreateWindowExA
DestroyWindow
gdi32
CreateCompatibleBitmap
SelectObject
DeleteObject
BitBlt
CreateCompatibleDC
GetStockObject
GetObjectA
GetDeviceCaps
CreateSolidBrush
DeleteDC
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CoInitialize
OleInitialize
CoTaskMemRealloc
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromString
CoTaskMemFree
OleLockRunning
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
OleUninitialize
oleaut32
SysStringLen
SysFreeString
VariantInit
VariantClear
VarBstrCmp
SysAllocStringLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
shlwapi
PathFileExistsA
comctl32
InitCommonControlsEx
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
HttpQueryInfoA
imagehlp
MakeSureDirectoryPathExists
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ