Static task
static1
Behavioral task
behavioral1
Sample
aea82d848e52e7ad7786f298c0c4221cf806736d232799d3e0acb210aeb861f9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aea82d848e52e7ad7786f298c0c4221cf806736d232799d3e0acb210aeb861f9.exe
Resource
win10v2004-20220812-en
General
-
Target
aea82d848e52e7ad7786f298c0c4221cf806736d232799d3e0acb210aeb861f9
-
Size
107KB
-
MD5
107a181eba89d76d777c2c73f5e12fa0
-
SHA1
fcbf2710f836cadb7eb4ea1952c4bb2e965a3c26
-
SHA256
aea82d848e52e7ad7786f298c0c4221cf806736d232799d3e0acb210aeb861f9
-
SHA512
52591a802f31051b92d832601d2a1ae77d77b83276cc3e1bf07ad0e0eb9ce85a5e27d62f389a41317c80afd98a79e5fdce902fce2d0b5f2feda23bd3254a1d1e
-
SSDEEP
3072:NitWJRMjpiVteyiJS0G5OLJJyLutrGjA:NitGRMHyd0KgkA
Malware Config
Signatures
Files
-
aea82d848e52e7ad7786f298c0c4221cf806736d232799d3e0acb210aeb861f9.exe windows x86
45b98236f7a5fd7e1036690ca282be6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
TerminateProcess
HeapCreate
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
GetCurrentProcess
WideCharToMultiByte
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringW
MultiByteToWideChar
SetEnvironmentVariableA
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
HeapReAlloc
HeapSize
ExitProcess
CreateToolhelp32Snapshot
GetModuleHandleA
FindNextFileA
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
FindFirstFileA
Sleep
QueryDosDeviceA
user32
ShowOwnedPopups
CopyAcceleratorTableW
EnumDisplayMonitors
InvertRect
TranslateAcceleratorW
DestroyAcceleratorTable
GetNextDlgGroupItem
MapVirtualKeyW
GetMessageTime
CheckMenuItem
ValidateRect
GetScrollPos
WinHelpW
EndDeferWindowPos
UnpackDDElParam
DestroyMenu
RegisterClipboardFormatW
RegisterClassW
BeginDeferWindowPos
PostThreadMessageW
GetKeyNameTextW
ShowScrollBar
EnableScrollBar
SetMenu
SetLayeredWindowAttributes
SendDlgItemMessageW
CharUpperW
ScrollWindow
GetClassNameW
SetScrollPos
CreateWindowExA
PeekMessageW
SetClassLongW
BringWindowToTop
IntersectRect
IsDialogMessageW
SetWindowContextHelpId
GetForegroundWindow
ShowCursor
LoadAcceleratorsW
GetQueueStatus
GetScrollRange
SetWindowRgn
RealChildWindowFromPoint
HideCaret
MapDialogRect
RegisterClassExA
SendDlgItemMessageA
CharNextW
TrackPopupMenu
GetWindowDC
IsIconic
IsChild
NotifyWinEvent
UnregisterClassW
IsZoomed
GetLastActivePopup
SetMenuItemBitmaps
ReuseDDElParam
SetForegroundWindow
CopyImage
InvalidateRgn
GetMenuDefaultItem
GetMenuStringW
GetMenuCheckMarkDimensions
BeginPaint
GetClassLongW
GetClassInfoExW
SetScrollRange
GetClassInfoW
InsertMenuItemW
gdi32
GetCharWidthW
DeleteDC
Polygon
StretchBlt
SetDIBColorTable
ExcludeClipRect
GetRgnBox
CreatePalette
CreateBitmap
GetPaletteEntries
SelectClipRgn
SetRectRgn
CreateRectRgnIndirect
CombineRgn
SetMapMode
Rectangle
GetMapMode
SaveDC
RealizePalette
SetPolyFillMode
GetObjectType
OffsetWindowOrgEx
StretchDIBits
ScaleViewportExtEx
GetBkColor
GetWindowExtEx
CreateRoundRectRgn
GetNearestPaletteIndex
CreateRectRgn
GetSystemPaletteEntries
CreatePatternBrush
Polyline
GetClipBox
SetViewportExtEx
SetROP2
GetViewportExtEx
SetTextAlign
ExtSelectClipRgn
IntersectClipRect
CreateDIBitmap
OffsetViewportOrgEx
ScaleWindowExtEx
RestoreDC
CreateSolidBrush
SetLayout
EnumFontFamiliesW
SetWindowOrgEx
MoveToEx
CreatePolygonRgn
CreateEllipticRgn
SetWindowExtEx
LineTo
SetViewportOrgEx
SelectPalette
GetTextCharsetInfo
GetLayout
advapi32
InitializeAcl
crypt32
CryptBinaryToStringA
CryptProtectData
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ