Static task
static1
Behavioral task
behavioral1
Sample
a81f7ca8f6d59e8d1f7f5cb63aa61ade2704d37e2ed7b9d5dffc1ca49c786ab7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a81f7ca8f6d59e8d1f7f5cb63aa61ade2704d37e2ed7b9d5dffc1ca49c786ab7.exe
Resource
win10v2004-20220812-en
General
-
Target
a81f7ca8f6d59e8d1f7f5cb63aa61ade2704d37e2ed7b9d5dffc1ca49c786ab7
-
Size
116KB
-
MD5
2ae648cd878f31970b0f43a7e147a800
-
SHA1
30290b7ec7096b87c6fd165d2a5c9b38e5b4a0ed
-
SHA256
a81f7ca8f6d59e8d1f7f5cb63aa61ade2704d37e2ed7b9d5dffc1ca49c786ab7
-
SHA512
c0689eb7fd4b91668f7639124693f2c46476ca64e2bdd91579d7a4807f1d022c8442315b98e6e0e30a3b1cb8ebfa65ff93c0429efd8e775ce847f0c864357a70
-
SSDEEP
1536:qD6EcbB8tMGeo49jKxgdAHCnIq5OWKekvoZR/ryeBrvP61W:q6Ecb7rPKOsCnIq5jJ/rFBji1W
Malware Config
Signatures
Files
-
a81f7ca8f6d59e8d1f7f5cb63aa61ade2704d37e2ed7b9d5dffc1ca49c786ab7.exe windows x86
99b1192fc70aeef81c0a1311a0dfb9b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
QueryPerformanceCounter
CompareFileTime
GetStartupInfoW
GetCurrentProcessId
GetCurrentProcess
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetModuleHandleA
VirtualAlloc
LCMapStringA
GetOEMCP
SetEvent
TerminateProcess
FreeLibrary
FlushFileBuffers
GetStringTypeA
CreateEventA
ExitProcess
SizeofResource
CompareStringW
FileTimeToLocalFileTime
FormatMessageW
TlsAlloc
GetStdHandle
LoadLibraryExW
LeaveCriticalSection
SetFilePointer
LocalFree
GetProcessHeap
InterlockedExchangeAdd
WaitForSingleObject
InterlockedExchange
SetHandleCount
GetSystemInfo
GlobalAlloc
ReadFile
GetEnvironmentStringsW
LocalAlloc
GetFileType
GetFileSize
MultiByteToWideChar
GetEnvironmentStrings
GlobalLock
CreateThread
GetVersionExW
ResetEvent
GetStringTypeW
FreeEnvironmentStringsW
WriteFile
FindNextFileW
GetFileAttributesA
SetStdHandle
GetVersionExA
TlsSetValue
HeapAlloc
LCMapStringW
HeapSize
RtlUnwind
Sleep
HeapFree
IsValidCodePage
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
GetLocaleInfoW
LoadLibraryW
SetConsoleCtrlHandler
EnterCriticalSection
FatalAppExitA
GetSystemTimeAsFileTime
GetTickCount
HeapDestroy
HeapCreate
GetLastError
SetLastError
TlsFree
TlsGetValue
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetModuleFileNameA
GetModuleFileNameW
DecodePointer
GetModuleHandleW
GetProcAddress
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
HeapSetInformation
GetCommandLineA
HeapReAlloc
user32
GetKeyState
SetMenuItemBitmaps
GetDlgItemTextW
ExitWindowsEx
GetActiveWindow
SetRect
DestroyWindow
EnableMenuItem
MessageBeep
IsIconic
UnhookWindowsHookEx
SetWindowPos
SetFocus
PostMessageW
BeginPaint
SetCursor
CallNextHookEx
InvalidateRect
LoadStringA
GetWindowLongA
GetSysColorBrush
PostQuitMessage
KillTimer
ClientToScreen
CharNextA
GetDesktopWindow
TrackPopupMenu
EmptyClipboard
DrawIcon
GetMenuItemInfoA
CreatePopupMenu
IntersectRect
DefWindowProcA
GetClientRect
UpdateWindow
EndDialog
LoadCursorA
SetCapture
DestroyMenu
DrawIconEx
GetSystemMenu
GetMenuDefaultItem
GetWindowDC
MoveWindow
GetMenuStringW
SetForegroundWindow
CharNextW
DispatchMessageA
GetParent
EndPaint
SendDlgItemMessageA
TranslateMessage
SetWindowTextW
CheckMenuItem
PeekMessageA
SetCursorPos
GetCapture
SetActiveWindow
ShowWindow
CloseClipboard
GetWindowTextW
GetSubMenu
wsprintfA
GetSystemMetrics
SetParent
GetWindowRgn
SendMessageW
DefWindowProcW
CreateWindowExW
GetDCEx
SetWindowLongW
LoadStringW
GetMenuState
LoadIconA
SetMenuItemInfoW
ScreenToClient
SetWindowLongA
GetFocus
GetDlgItem
GetWindowTextA
GetMessagePos
ReleaseDC
IsWindowVisible
ShowWindowAsync
IsWindowUnicode
MessageBoxA
IsChild
GetMenuStringA
DrawTextW
RegisterClassW
SetClipboardData
EnableWindow
ReleaseCapture
SetTimer
LoadIconW
DialogBoxParamA
GetMenuItemInfoW
GetDlgItemInt
GetMessageW
FillRect
CreateWindowExA
ole32
CoCreateGuid
OleRun
OleLoadFromStream
OleInitialize
msi
ord50
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ