Static task
static1
Behavioral task
behavioral1
Sample
08d2773b277118553bba8c2889ba9c4a43a125d913d02fff7a80f27db34d5e03.exe
Resource
win7-20220812-en
General
-
Target
08d2773b277118553bba8c2889ba9c4a43a125d913d02fff7a80f27db34d5e03
-
Size
471KB
-
MD5
0d977ecda55a3c11231eb15680d08ca0
-
SHA1
2949ab2ed0c0e860d27f8edbe63fc308c88e3f9f
-
SHA256
08d2773b277118553bba8c2889ba9c4a43a125d913d02fff7a80f27db34d5e03
-
SHA512
445125cd02868efac3ad198293e1e01cce3cbce0690f0b2f1809b5be5ee44d98318263eeda2b3b21209e02cc1b0809d8d6f9616c0aaf2d53abf29a4b23f25112
-
SSDEEP
6144:1mqE5i/E26wmSVapxC7WxgfvNDm/Vxn2LyMEyNdVdDcpiiBj/Zfdt+l35xD:1mqE5B3rScC7WxY8/2LS+dV2sa/R2
Malware Config
Signatures
Files
-
08d2773b277118553bba8c2889ba9c4a43a125d913d02fff7a80f27db34d5e03.exe windows x86
a18f83eee523d789b5fbbdd1b900d0f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
GetModuleHandleA
GetLocalTime
RaiseException
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
SizeofResource
LockResource
LoadResource
FindResourceExA
lstrcpynA
GetTempPathA
lstrlenA
OutputDebugStringA
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
WriteFile
SetFilePointer
MoveFileA
DeleteFileA
SetFileAttributesA
GetFileSize
GetFileAttributesA
GetLastError
lstrlenW
CreateThread
CreateDirectoryA
WaitForSingleObject
GetDiskFreeSpaceA
lstrcpyA
GetVersionExA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
ReadFile
GetStdHandle
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
VirtualAlloc
VirtualFree
DeleteCriticalSection
CreateEventA
SetEvent
ResetEvent
InitializeCriticalSection
SetFileTime
CreateFileW
SetLastError
SetFileAttributesW
CreateDirectoryW
DeleteFileW
SuspendThread
FindFirstFileW
SetEndOfFile
GetSystemInfo
InterlockedIncrement
InterlockedDecrement
GetStartupInfoA
Sleep
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
HeapDestroy
HeapFree
HeapReAlloc
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
HeapSize
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
GetStringTypeW
GetStringTypeA
ExitProcess
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
CloseHandle
SetUnhandledExceptionFilter
GetModuleFileNameA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCommandLineA
GetSystemTimeAsFileTime
VirtualQuery
GetModuleHandleW
VirtualProtect
ExitThread
RtlUnwind
IsDebuggerPresent
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
HeapAlloc
user32
UnregisterClassA
CharNextA
MessageBoxA
RegisterWindowMessageA
IsWindow
FindWindowA
PostMessageA
SendMessageA
CharUpperA
DestroyWindow
DefWindowProcA
CharUpperW
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
ole32
CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
oleaut32
VarUI4FromStr
SysFreeString
VariantClear
SysAllocString
shlwapi
PathRemoveExtensionA
Sections
.text Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE