Static task
static1
Behavioral task
behavioral1
Sample
a8973c5a2747dab6ad3ac448ec882e2ec6768bd7a910e4674ceaff9c0bbfa963.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8973c5a2747dab6ad3ac448ec882e2ec6768bd7a910e4674ceaff9c0bbfa963.exe
Resource
win10v2004-20220812-en
General
-
Target
a8973c5a2747dab6ad3ac448ec882e2ec6768bd7a910e4674ceaff9c0bbfa963
-
Size
153KB
-
MD5
136e06e6fb5c520cd637b578205ca671
-
SHA1
976466254078b186f9b273dabfeb559d2597a7cf
-
SHA256
a8973c5a2747dab6ad3ac448ec882e2ec6768bd7a910e4674ceaff9c0bbfa963
-
SHA512
2c5f42305891ac56087e065cefb5a0d3a8b622939d5e1c620afa0a2727a8f4aa600fa3a8f633813c50bdc0e1d5b0c19ec40290d975e99d1660264773babdf9d2
-
SSDEEP
3072:Tl7Zl2TpQQ3QVz8J+IfRkEMjf+wtuQ4SGPHxl9lipaRtLq1ZyAIG:5VlYptgVgJbfRof/tuYMRl9SaRtcI
Malware Config
Signatures
Files
-
a8973c5a2747dab6ad3ac448ec882e2ec6768bd7a910e4674ceaff9c0bbfa963.exe windows x86
ab87dfa91a4fa4089b92fc4269474645
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegGetKeySecurity
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyA
RegReplaceKeyW
RegOpenKeyW
RegDeleteValueA
RegQueryValueW
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
RegEnumKeyExW
RegLoadKeyA
RegDeleteKeyW
RegEnumKeyA
RegEnumValueW
RegDeleteKeyA
RegLoadKeyW
RegOpenKeyW
RegEnumKeyExW
RegReplaceKeyW
RegDeleteValueW
RegQueryValueExW
RegLoadKeyW
RegDeleteKeyA
RegOpenKeyExW
RegCreateKeyA
RegQueryValueExA
RegOpenKeyW
RegLoadKeyA
RegQueryValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueA
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyW
RegEnumValueW
RegCreateKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumKeyExA
RegLoadKeyA
RegCreateKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueA
RegCreateKeyExA
RegOpenKeyExW
RegCreateKeyExW
kernel32
CopyFileExW
GetFileType
DeleteFileA
FlushFileBuffers
DeleteAtom
FatalExit
GetStdHandle
DeleteFileW
FindAtomW
GetLastError
ExitThread
GetLocalTime
FreeResource
GetPriorityClass
GetFileTime
FindAtomA
AddAtomW
ReadFile
OpenFileMappingA
ExitThread
FindAtomA
GetLocalTime
GetStdHandle
GetFileTime
CopyFileExW
FindAtomW
GetLastError
GetCommandLineA
FreeResource
AddAtomA
FindClose
DeleteFileW
GetLocalTime
GetLastError
GetFileType
ExitProcess
CopyFileExA
FindAtomA
GetCommandLineA
GetCPInfo
CopyFileA
GlobalFree
FreeResource
AddAtomW
CopyFileExW
OpenFileMappingA
OpenFile
ExitThread
CreateDirectoryA
GetFileTime
WriteFile
FatalExit
FindAtomW
DeleteAtom
ReadFile
DeleteFileW
GlobalFree
OpenFileMappingA
GetFileTime
FindAtomW
CopyFileExW
CreateDirectoryA
DeleteFileA
FlushFileBuffers
WriteFile
GetStdHandle
GetCPInfo
CopyFileExA
AddAtomA
GetLastError
DeleteFileW
FindClose
CopyFileA
DeleteAtom
GetCommandLineA
AddAtomW
FindAtomA
GetLastError
AddAtomA
GetLocalTime
GlobalFree
GetStdHandle
WriteFile
FreeResource
GetCommandLineA
DeleteFileA
GetPriorityClass
ExitThread
ReadFile
FatalExit
CopyFileA
GetCPInfo
CopyFileExA
CopyFileExW
ExitThread
WriteFile
ExitProcess
GetLastError
DeleteFileW
FatalExit
GetCommandLineA
AddAtomA
OpenFile
CopyFileA
GetFileTime
GlobalFree
FindAtomA
GetFileType
GetStdHandle
ReadFile
FindAtomA
OpenFile
AddAtomA
FatalExit
CreateDirectoryA
DeleteFileW
ExitProcess
GetCommandLineA
GetPriorityClass
FreeResource
GetCPInfo
CopyFileExW
user32
DrawTextW
EndDialog
CloseWindow
CalcMenuBar
GetWindowTextA
GetMenu
GetWindowTextLengthA
InsertMenuA
IsWindow
AppendMenuA
IsMenu
CreateIcon
IsWindow
DrawIcon
AlignRects
GetDC
GetFocus
InsertMenuA
CloseWindow
GetWindowTextLengthA
BeginPaint
GetCursor
AppendMenuW
DialogBoxParamW
IsMenu
CopyImage
CopyIcon
LoadMenuA
DrawIconEx
IsWindow
DrawTextA
BlockInput
GetDC
LoadMenuA
GetDlgItem
GetWindowTextA
InsertMenuA
CopyImage
GetFocus
BeginPaint
GetCursor
DrawIcon
CloseWindow
Sections
.643d Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.c981a Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ga0eh Size: 104KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.2gc0g Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.91084 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ