Static task
static1
Behavioral task
behavioral1
Sample
96443f1ddabbd181fd9db6ad131cef89f9613d0572bc81d97ede5df1d691948d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96443f1ddabbd181fd9db6ad131cef89f9613d0572bc81d97ede5df1d691948d.exe
Resource
win10v2004-20220812-en
General
-
Target
96443f1ddabbd181fd9db6ad131cef89f9613d0572bc81d97ede5df1d691948d
-
Size
501KB
-
MD5
0a4aa87b86756d905569c0ea87c206f0
-
SHA1
8af52eb025b00d773f91c24036872d760e4eab25
-
SHA256
96443f1ddabbd181fd9db6ad131cef89f9613d0572bc81d97ede5df1d691948d
-
SHA512
15ef6d0b041764ae211d28fd644819be0ce24d51a6d187bd86eb9d534de9e3649e68e8bd72b84b16c55b20c34cb2fc1519d8a41140ff4db750d42064b62f2157
-
SSDEEP
6144:rzeZmTa6kFAOA2Jnmuf/VPXXpa1NH+owy0Yx8WDLHwMhymi4:rzeZ8a6kFm+ZZXMHxwxYGWD/yO
Malware Config
Signatures
Files
-
96443f1ddabbd181fd9db6ad131cef89f9613d0572bc81d97ede5df1d691948d.exe windows x86
3cb77b6d7fc8a256e94520cddba43a07
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumPropsExW
GetWindowRect
UnregisterDeviceNotification
VkKeyScanA
SetWindowsHookExW
GetMessagePos
GetUserObjectSecurity
SetDlgItemInt
ScreenToClient
CharLowerBuffW
FlashWindowEx
LoadAcceleratorsW
GetShellWindow
GetClipCursor
EnumDesktopWindows
InvalidateRect
SetMenu
GetUserObjectInformationW
SwitchDesktop
GetKeyboardLayout
CloseWindowStation
WaitForInputIdle
EnumThreadWindows
GetClassInfoExA
WindowFromPoint
ChildWindowFromPointEx
GetSysColorBrush
ShowScrollBar
SetPropW
DrawFrameControl
LoadImageA
RemoveMenu
SetDebugErrorLevel
OpenClipboard
wvsprintfA
CreateAcceleratorTableA
CreateIcon
MoveWindow
PostThreadMessageW
EnumPropsA
GetComboBoxInfo
IsRectEmpty
PrivateExtractIconsW
LoadKeyboardLayoutW
RealGetWindowClassA
EnableScrollBar
GetMenuItemInfoA
GetWindowPlacement
IsCharUpperW
TranslateMessage
DefFrameProcW
ChildWindowFromPoint
LoadCursorA
RemovePropW
MapDialogRect
RegisterHotKey
SetCursorPos
IsCharUpperA
MonitorFromPoint
GetKeyboardLayoutNameW
CopyAcceleratorTableA
CharToOemBuffA
DialogBoxParamA
DefWindowProcA
SetCaretBlinkTime
PrintWindow
GetClassNameW
GetCursor
OffsetRect
RegisterWindowMessageA
FlashWindow
CharToOemA
RegisterDeviceNotificationW
ToUnicodeEx
DialogBoxIndirectParamW
LoadBitmapW
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
SetWindowWord
DdeInitializeW
OemToCharA
SendMessageTimeoutW
RegisterClassExA
DispatchMessageA
GetGUIThreadInfo
BroadcastSystemMessageA
GetWindowContextHelpId
wininet
InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
kernel32
GetModuleHandleA
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
LCMapStringW
LCMapStringA
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapReAlloc
HeapSize
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
HeapAlloc
GetTimeZoneInformation
HeapFree
TlsFree
TlsAlloc
GetModuleHandleW
IsValidCodePage
GetOEMCP
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeFormatA
ReadConsoleInputW
CreateJobObjectA
GetLargestConsoleWindowSize
EndUpdateResourceA
BackupRead
EnumDateFormatsW
CreateActCtxW
AttachConsole
CommConfigDialogA
GetCurrentActCtx
HeapQueryInformation
ReplaceFileA
GetProfileIntW
GlobalFix
GetLocaleInfoW
SearchPathA
EnumCalendarInfoW
SetFileApisToOEM
SetThreadContext
GetConsoleWindow
ReadConsoleOutputCharacterA
MoveFileExW
GetAtomNameW
SetCriticalSectionSpinCount
GlobalAddAtomW
IsBadStringPtrA
GetMailslotInfo
GetDiskFreeSpaceW
QueryInformationJobObject
GetCompressedFileSizeA
AddVectoredExceptionHandler
OpenJobObjectW
ReadConsoleInputA
GetConsoleProcessList
GlobalFindAtomW
SetFileApisToANSI
IsWow64Process
GetEnvironmentStrings
FlushFileBuffers
CommConfigDialogW
Sleep
VirtualFree
lstrlenA
lstrcpynA
LoadLibraryExA
GetStartupInfoA
GetCommandLineA
ExitProcess
ExitThread
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetFileSize
CloseHandle
VirtualAllocEx
OpenProcess
GetCurrentProcessId
SetThreadPriority
LocalFileTimeToFileTime
OpenMutexW
GetLocalTime
MulDiv
GetPrivateProfileStructA
VirtualAlloc
FreeLibraryAndExitThread
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
EnumCalendarInfoA
FindClose
FindFirstFileA
FindFirstFileW
FindResourceA
FormatMessageA
FormatMessageW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineW
GetComputerNameA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetPrivateProfileStringA
GetProcAddress
GetStdHandle
GetStringTypeExA
GetStringTypeExW
GetTempPathA
GetTempPathW
GetThreadLocale
GetTickCount
GetUserDefaultLangID
GetVersion
GetVersionExA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalFree
LockResource
MultiByteToWideChar
ReadFile
ReleaseMutex
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SetThreadLocale
SizeofResource
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcmpA
lstrcpyA
lstrlenW
LocalAlloc
TlsGetValue
TlsSetValue
GetFileType
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ