?RegenerateMainValues@@YGKPBDDPAX:O
Static task
static1
Behavioral task
behavioral1
Sample
0a91f306a0aa9f21c04b1e0adeee8926356c77f2c67a4ac68966dbdb5773d094.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0a91f306a0aa9f21c04b1e0adeee8926356c77f2c67a4ac68966dbdb5773d094.exe
Resource
win10v2004-20220812-en
General
-
Target
0a91f306a0aa9f21c04b1e0adeee8926356c77f2c67a4ac68966dbdb5773d094
-
Size
174KB
-
MD5
2e154c71d1e479f67e69b519a107d561
-
SHA1
537477bef2c17c6072bf2a4e981d8153b8115e77
-
SHA256
0a91f306a0aa9f21c04b1e0adeee8926356c77f2c67a4ac68966dbdb5773d094
-
SHA512
a195220fc706c4acc3a16f689d0d9a2ddb187fb1c053e7915e5029f308286220d8868526fa8e224bb62518db8334d8084608caaa873819a3b16078e2a0f03a9f
-
SSDEEP
3072:/8C3qqWaWKp4mHmeudswsn+rEvDaXkZsGbbydf1WRx1PEJqC5eoZPN:JqLcNuxs+rU2K3ydf1kx1cJTUWP
Malware Config
Signatures
Files
-
0a91f306a0aa9f21c04b1e0adeee8926356c77f2c67a4ac68966dbdb5773d094.exe windows x86
3f1c54583d82e8ca16bfee9a3a652104
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
EscapeCommFunction
GetFileType
GetFileAttributesExW
GetFileAttributesExA
GetModuleHandleA
lstrcpyA
GlobalLock
GetVersionExW
GetFileAttributesW
CloseHandle
GetOverlappedResult
GetBinaryTypeA
IsValidLanguageGroup
HeapFree
MulDiv
GlobalHandle
CreateThread
InitializeCriticalSection
VirtualQuery
CompareStringW
SetMailslotInfo
VerSetConditionMask
SetHandleCount
lstrcpyW
SetFileTime
GetAtomNameA
SetErrorMode
FreeLibrary
CompareFileTime
lstrlenA
RemoveDirectoryA
lstrlenW
ReadFile
GetTickCount
DisconnectNamedPipe
lstrcpynW
GetVersionExA
GetAtomNameW
GetLastError
GetDateFormatA
HeapValidate
GetSystemDefaultLangID
CreateEventA
CreateFileMappingW
GetPriorityClass
UnhandledExceptionFilter
FindResourceExA
LCMapStringA
ResetEvent
HeapCreate
SearchPathW
GetModuleFileNameA
FindNextFileA
GetStartupInfoA
SetCommTimeouts
WriteFile
WaitCommEvent
SetFilePointer
msvcrt
_controlfp
fseek
sprintf
wcslen
iswalpha
swscanf
remove
vswprintf
qsort
__set_app_type
__p__fmode
__p__commode
isprint
strtol
_amsg_exit
fflush
puts
mbstowcs
gets
strrchr
iswspace
atoi
_initterm
swprintf
wcscspn
_ismbblead
strtok
islower
_XcptFilter
clearerr
floor
_exit
strncpy
wcscat
calloc
_cexit
fwrite
getenv
wcscoll
towlower
fputs
__setusermatherr
sscanf
fputc
wcsrchr
mktime
__getmainargs
user32
CascadeWindows
SendNotifyMessageW
EndDialog
TrackPopupMenuEx
RegisterClassW
GetMenuItemID
GetDlgItemTextW
InternalGetWindowText
wsprintfA
BeginPaint
EnableMenuItem
SetLastErrorEx
ReplyMessage
CheckDlgButton
GetUpdateRect
GetDlgItemInt
DrawAnimatedRects
CharLowerBuffW
DestroyIcon
EnumChildWindows
MessageBoxExW
GetWindowRect
IsDialogMessageW
ArrangeIconicWindows
TrackPopupMenu
DestroyMenu
IsZoomed
DrawFocusRect
DrawTextA
GetLastActivePopup
GetClassInfoExA
LoadIconA
GetKeyboardType
CloseDesktop
MessageBoxW
GetMenuStringA
CharUpperBuffA
HiliteMenuItem
FindWindowExA
LoadImageA
CheckRadioButton
CharPrevW
DragObject
GetWindowTextW
CreatePopupMenu
GetCaretPos
DefDlgProcW
SetSysColors
DrawStateA
InvalidateRect
GetIconInfo
SetScrollRange
GetMenuStringW
LockWindowUpdate
LoadStringA
WindowFromPoint
RegisterClassA
GetMenuCheckMarkDimensions
PostQuitMessage
ModifyMenuW
LoadCursorW
RegisterHotKey
GetDialogBaseUnits
ChildWindowFromPointEx
GetDoubleClickTime
GetDlgItem
LoadIconW
GetMenuState
PostThreadMessageW
MapVirtualKeyA
OemToCharA
ScrollWindowEx
IsWindowVisible
GetDCEx
CallWindowProcA
PostMessageW
GetKeyState
PostMessageA
AdjustWindowRect
CharToOemBuffA
SetWindowPos
EnableScrollBar
DrawStateW
GetUpdateRgn
DrawMenuBar
GetSubMenu
MessageBoxExA
EnumThreadWindows
InflateRect
SendDlgItemMessageW
IsCharAlphaNumericW
CheckMenuRadioItem
DrawEdge
GetNextDlgTabItem
LoadBitmapW
EnumWindows
FindWindowExW
CallWindowProcW
SetCursor
OemToCharBuffA
AllowSetForegroundWindow
CharUpperA
SwitchToThisWindow
GetPropW
CreateDialogParamW
SetPropW
GetWindowTextLengthW
TranslateMessage
GetClassLongA
GetDC
GetMenuItemRect
SetMenu
wvsprintfW
GetMessageExtraInfo
MapVirtualKeyExW
MessageBoxA
DrawIconEx
IsWindowEnabled
SetTimer
IsCharAlphaA
DefFrameProcW
DestroyCaret
EnableWindow
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e_tab Size: 512B - Virtual size: 125B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.redit Size: 1KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i_tab Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.site Size: 1024B - Virtual size: 755B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ