Static task
static1
Behavioral task
behavioral1
Sample
0747c904f98c3341cfc8279b871ccd5ff4f5f48aa12b665452504cce270c9af2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0747c904f98c3341cfc8279b871ccd5ff4f5f48aa12b665452504cce270c9af2.exe
Resource
win10v2004-20220812-en
General
-
Target
0747c904f98c3341cfc8279b871ccd5ff4f5f48aa12b665452504cce270c9af2
-
Size
436KB
-
MD5
08bbd6ea80a22bb8c3ba7b14b07374b1
-
SHA1
016ad9411183167c3c72a3ef303a0a49a928cd79
-
SHA256
0747c904f98c3341cfc8279b871ccd5ff4f5f48aa12b665452504cce270c9af2
-
SHA512
c2b63cab661b60cc60659324ab643871c399d2d1598159f6fd12dff17571b3f5e825a5e0719b25f283ed129f703ba0fd6814acd788786319faac6b320dde98d8
-
SSDEEP
6144:XVRYsOFp76zg86/fq6c76XAyQlTgALXqo1jmUZxL6xQGQgg:X87D/fzU6QPZNLXqs76P
Malware Config
Signatures
Files
-
0747c904f98c3341cfc8279b871ccd5ff4f5f48aa12b665452504cce270c9af2.exe windows x86
31d249adc89772c5f522022a934fca7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
SetFilePointer
GetCurrentProcessId
GetModuleFileNameW
CreateFileA
VirtualQuery
GetModuleFileNameA
SetUnhandledExceptionFilter
GetThreadSelectorEntry
WritePrivateProfileStringW
ReadProcessMemory
GetCurrentThread
LocalFree
WideCharToMultiByte
GetCPInfo
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetDateFormatA
GetTimeFormatA
GetStdHandle
GetCurrentDirectoryA
GetFullPathNameW
IsValidCodePage
GetOEMCP
HeapCreate
ExitProcess
GetTimeZoneInformation
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
CreateDirectoryW
FileTimeToLocalFileTime
GetVersionExW
FindClose
FindFirstFileW
DeviceIoControl
MultiByteToWideChar
RaiseException
SetLastError
ReadFile
DeleteFileW
FreeLibrary
CopyFileW
FlushInstructionCache
GetProcAddress
GetCurrentProcess
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
CreateMutexW
FileTimeToSystemTime
GetCurrentThreadId
OpenMutexW
GetDriveTypeW
GlobalLock
GlobalAlloc
GetModuleHandleW
GlobalUnlock
GetLastError
WaitForSingleObject
GetTickCount
UnmapViewOfFile
CloseHandle
GetFileSize
CreateFileMappingW
MapViewOfFileEx
WriteFile
ReleaseMutex
CreateFileW
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
CompareStringA
FlushFileBuffers
GetDriveTypeA
Sleep
InterlockedDecrement
InterlockedIncrement
GetThreadLocale
GetLocaleInfoA
GetACP
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetFileType
user32
DialogBoxParamW
GetActiveWindow
EnumWindows
UnregisterClassA
GetWindowLongW
MessageBoxW
EndDialog
KillTimer
SendMessageW
LoadIconW
SetTimer
GetDlgItem
InvalidateRect
SetWindowTextW
GetWindowTextW
SetWindowLongW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ValidateRect
GetDC
ScreenToClient
GetWindowRect
ReleaseDC
SetForegroundWindow
gdi32
CreateFontIndirectW
GetTextExtentPointW
LineTo
MoveToEx
TextOutW
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
Rectangle
SelectObject
CreateSolidBrush
CreatePen
BitBlt
DeleteObject
advapi32
RegOpenKeyExA
RegQueryValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
GetSecurityDescriptorSacl
RegCloseKey
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderPathW
ole32
CoInitialize
CoCreateGuid
CoUninitialize
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
shlwapi
PathFileExistsW
comctl32
ord17
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
ws2_32
socket
gethostbyname
WSAStartup
htons
closesocket
sendto
WSACleanup
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 184KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE