Static task
static1
Behavioral task
behavioral1
Sample
a90c38cf2e3a3b8cc0f2aab924cc99ac0dcfcff276551cbac0e5e132018d0c00.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a90c38cf2e3a3b8cc0f2aab924cc99ac0dcfcff276551cbac0e5e132018d0c00.exe
Resource
win10v2004-20220812-en
General
-
Target
a90c38cf2e3a3b8cc0f2aab924cc99ac0dcfcff276551cbac0e5e132018d0c00
-
Size
2.0MB
-
MD5
2916101b5b2226fcb908b09e176fb7a6
-
SHA1
13b2d5a79bda28c15998d128c9fd946a123aaf58
-
SHA256
a90c38cf2e3a3b8cc0f2aab924cc99ac0dcfcff276551cbac0e5e132018d0c00
-
SHA512
677b5ee2ab65516b13d0d512e4fd14b780572724fc60236ceb2d797c7a52a3be5094e786afc3b584717ee2402c23d0a279ad025cd19720a369458faffc5dbb12
-
SSDEEP
49152:ozfwqAP88J6OjJNnWgJpvuv5WNhx7TThxzP:gW68
Malware Config
Signatures
Files
-
a90c38cf2e3a3b8cc0f2aab924cc99ac0dcfcff276551cbac0e5e132018d0c00.exe windows x86
0366f054ab748f1f96f7bf532015649e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
GetFileAttributesW
LocalFileTimeToFileTime
ReadFile
SetFilePointer
SetFileTime
WriteFile
CloseHandle
SystemTimeToFileTime
WideCharToMultiByte
GetFileInformationByHandle
GetFileSize
GetLocalTime
GetTickCount
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
OutputDebugStringW
lstrcmpW
lstrcpyW
lstrcatW
GetCommandLineW
DeleteFileW
FindClose
RemoveDirectoryW
SetFileAttributesW
WaitForSingleObject
Sleep
GetProcessTimes
GetCurrentProcess
ExitProcess
TerminateProcess
CreateProcessA
CreateProcessW
OpenProcess
GetSystemTime
IsWow64Process
GetModuleHandleExW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
LocalFree
EncodePointer
LCMapStringEx
SetFileInformationByHandle
FlsAlloc
FlsGetValue
DeleteCriticalSection
FlsFree
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
CreateSymbolicLinkW
CompareStringEx
GetCPInfo
GetLocaleInfoEx
IsDebuggerPresent
GetFullPathNameW
GetDriveTypeW
GetSystemInfo
HeapValidate
TlsFree
TlsSetValue
SetEndOfFile
TlsGetValue
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
InitializeCriticalSectionEx
SetLastError
GetLastError
RaiseException
GetFileAttributesExW
SetCurrentDirectoryW
GetTimeZoneInformation
MoveFileExW
ReadConsoleW
SetFilePointerEx
TlsAlloc
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
LoadLibraryW
GetFileSizeEx
FlushFileBuffers
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
EnumSystemLocalesW
FlsSetValue
DecodePointer
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
WriteConsoleW
GetFileType
HeapQueryInformation
GetCurrentThread
GetCommandLineA
GetStdHandle
SystemTimeToTzSpecificLocalTime
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
VirtualQuery
FreeLibrary
OutputDebugStringA
GetModuleFileNameW
GetModuleHandleA
FindFirstFileExW
user32
ShowWindow
SetWindowPos
FindWindowW
SendMessageW
GetClassNameW
GetWindowThreadProcessId
GetWindow
wsprintfW
GetDesktopWindow
IsWindowVisible
UnregisterClassW
EnumWindows
advapi32
RegOpenKeyExW
RegSetValueExW
RegCloseKey
ole32
CoInitialize
CoCreateInstance
CoUninitialize
shell32
CommandLineToArgvW
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
SysAllocString
SafeArrayPutElement
GetErrorInfo
VariantClear
VariantInit
VariantChangeType
SetErrorInfo
CreateErrorInfo
SysFreeString
shlwapi
PathFileExistsW
mscoree
CorBindToRuntimeEx
CLRCreateInstance
gdi32
DeleteDC
ws2_32
socket
send
closesocket
connect
htons
WSAGetLastError
WSACleanup
WSAStartup
gethostbyname
inet_addr
recv
gethostbyaddr
gdiplus
GdiplusShutdown
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 319KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 777B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ