Static task
static1
Behavioral task
behavioral1
Sample
a1552755f3f892d4e886ca8437de4152d01f6b32a19c4929aade156d8cdcec3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1552755f3f892d4e886ca8437de4152d01f6b32a19c4929aade156d8cdcec3f.exe
Resource
win10v2004-20220812-en
General
-
Target
a1552755f3f892d4e886ca8437de4152d01f6b32a19c4929aade156d8cdcec3f
-
Size
158KB
-
MD5
2121e69050b5c93b27199b0ee4aea531
-
SHA1
e5f77e2f061cd8879756152e975889574b8ea16a
-
SHA256
a1552755f3f892d4e886ca8437de4152d01f6b32a19c4929aade156d8cdcec3f
-
SHA512
3b98d1748149413bfdb0532bf8742bd394e53552cac9a5c428df04bfae7efe8e7fce771b1961b67b52597a39acd3b2ee20fecef3b27a5c508051ac2f2741533e
-
SSDEEP
3072:3DQVsUCjmztIFjWjP/TtOttmIULPIKhVGbayC:3MVmRFCjBOWdDw
Malware Config
Signatures
Files
-
a1552755f3f892d4e886ca8437de4152d01f6b32a19c4929aade156d8cdcec3f.exe windows x86
eb09ded537f6553ecddc77d15db76a1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetDateFormatW
QueryPerformanceCounter
CompareStringA
GetStdHandle
LocalAlloc
GetCurrentThread
GetTimeFormatA
WideCharToMultiByte
GetComputerNameW
LoadResource
CreateThread
LockResource
lstrcmpiW
lstrlenA
ResetEvent
WritePrivateProfileSectionW
SizeofResource
GetFileAttributesExW
GetVersionExW
InterlockedDecrement
lstrcmpW
WaitForSingleObject
FlushInstructionCache
ReadFile
CompareStringW
LoadLibraryA
SetConsoleCtrlHandler
FindResourceW
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
GetEnvironmentStringsW
TlsSetValue
lstrlenW
HeapAlloc
VirtualQuery
GetStringTypeW
InterlockedExchange
GetWindowsDirectoryW
LCMapStringA
TlsAlloc
HeapReAlloc
UnhandledExceptionFilter
HeapFree
LoadLibraryW
FormatMessageW
CreateFileA
GetPrivateProfileIntW
FreeEnvironmentStringsW
GlobalAlloc
FindFirstChangeNotificationW
LocalFree
lstrcatW
HeapDestroy
GetConsoleMode
GetCurrentProcessId
InterlockedCompareExchange
FindNextChangeNotification
ExpandEnvironmentStringsA
DebugBreak
GetDateFormatA
SetHandleCount
LeaveCriticalSection
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
LoadLibraryExW
GetConsoleCP
GlobalUnlock
GetFileAttributesW
lstrcpynW
CopyFileW
GetConsoleOutputCP
LCMapStringW
GetSystemDefaultLangID
VerLanguageNameW
GetProcessHeap
GetCompressedFileSizeA
GetModuleHandleA
GetVersion
OpenEventW
lstrcpyW
GetLastError
ExitProcess
CreateFileW
GetModuleFileNameW
GlobalLock
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDebuggerPresent
WritePrivateProfileStringW
Sleep
IsProcessorFeaturePresent
IsValidLocale
FreeLibrary
GetTempFileNameW
GetUserDefaultLCID
EnumSystemLocalesA
GetSystemDirectoryW
WaitForMultipleObjects
WriteConsoleW
GetStringTypeA
GetCurrentProcess
EnterCriticalSection
GetCPInfo
MulDiv
InterlockedIncrement
IsValidCodePage
HeapSize
VirtualFree
GetModuleFileNameA
GetPrivateProfileStringW
RaiseException
GetCurrentThreadId
ExpandEnvironmentStringsW
CloseHandle
HeapCreate
lstrcpynA
TlsGetValue
OutputDebugStringW
GetTempPathW
WriteConsoleA
GlobalSize
DeleteCriticalSection
WinExec
GetFileType
user32
DrawFocusRect
EndDialog
GetKeyState
RegisterClassExW
GetWindow
ReleaseCapture
SetTimer
LoadCursorW
DrawMenuBar
TranslateAcceleratorW
GetWindowLongW
ReleaseDC
SetFocus
GetClientRect
RegisterWindowMessageW
GetDlgCtrlID
SetForegroundWindow
RegisterClipboardFormatW
LoadAcceleratorsW
OpenClipboard
UnregisterClassW
SystemParametersInfoW
GetMessageW
GetWindowRect
MonitorFromWindow
OffsetRect
GetActiveWindow
SendMessageW
BringWindowToTop
SetScrollInfo
UnregisterClassA
DestroyCaret
InflateRect
wvsprintfW
GetFocus
IsClipboardFormatAvailable
CreateCaret
KillTimer
BeginDeferWindowPos
InvalidateRect
GetClassLongW
FrameRect
CharLowerW
SetCapture
CopyRect
IsChild
GetClassInfoW
GetWindowDC
RemoveMenu
DrawFrameControl
EnableMenuItem
GetSysColorBrush
SetWindowPos
GetCapture
ScrollWindowEx
SetScrollPos
MessageBoxW
DeferWindowPos
AppendMenuW
ScreenToClient
FillRect
GetDC
DefMDIChildProcW
DestroyWindow
SetCaretPos
RegisterClassW
BeginPaint
GetWindowTextW
MapWindowPoints
SetWindowsHookExW
DispatchMessageW
EndPaint
SetDlgItemTextW
DefWindowProcW
EmptyClipboard
GetWindowThreadProcessId
CreateWindowExW
GetClassNameW
ModifyMenuW
LoadImageW
IsWindowVisible
SetClipboardData
GetDesktopWindow
CallNextHookEx
WindowFromPoint
PostQuitMessage
LoadMenuW
GetScrollInfo
DestroyMenu
GetMonitorInfoW
GetSystemMenu
DefFrameProcW
CreatePopupMenu
GetCursorPos
GetWindowTextLengthW
MessageBeep
UnhookWindowsHookEx
ClientToScreen
LoadStringA
GetSubMenu
DialogBoxParamW
TranslateMessage
CallWindowProcW
DrawEdge
MoveWindow
GetSystemMetrics
CharNextW
EnableWindow
UpdateWindow
PeekMessageW
TrackPopupMenu
DragDetect
ShowScrollBar
CloseClipboard
EndDeferWindowPos
GetMenuDefaultItem
GetMessagePos
gdi32
SetViewportOrgEx
SetBkMode
CreateRectRgn
GetClipRgn
CreateFontW
BitBlt
IntersectClipRect
LineTo
RestoreDC
GetTextExtentPointW
CreatePen
PatBlt
Polyline
SetBrushOrgEx
SelectObject
CreateCompatibleBitmap
DPtoLP
CreateFontIndirectW
SaveDC
CreateBitmap
Polygon
DeleteDC
SelectPalette
SetPolyFillMode
SelectClipRgn
GetTextExtentPoint32W
SetTextColor
CreatePatternBrush
TextOutW
CreateSolidBrush
LPtoDP
GetViewportOrgEx
CreateDIBSection
RealizePalette
ExtTextOutW
GetDeviceCaps
DeleteObject
SetBkColor
GetStockObject
GetObjectW
MoveToEx
SetWindowOrgEx
CreatePalette
CreateCompatibleDC
GetTextMetricsW
Rectangle
oleaut32
VarI4FromStr
VarUI4FromStr
VarR8FromStr
VarDecCmp
SystemTimeToVariantTime
SysFreeString
VarDecFromStr
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wsock32
getsockname
send
bind
ntohs
ioctlsocket
listen
accept
recv
shutdown
htons
WSAAsyncSelect
inet_addr
closesocket
getpeername
connect
socket
WSASetLastError
WSAGetLastError
gethostbyname
msvcrt
memset
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ