Static task
static1
Behavioral task
behavioral1
Sample
094a3f9f5c4ee02bd9313c22b493a12c1f5281e3611f1264777881e394aad2d8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
094a3f9f5c4ee02bd9313c22b493a12c1f5281e3611f1264777881e394aad2d8.exe
Resource
win10v2004-20220812-en
General
-
Target
094a3f9f5c4ee02bd9313c22b493a12c1f5281e3611f1264777881e394aad2d8
-
Size
616KB
-
MD5
0c79dba046fe753547a502ae7517d89e
-
SHA1
379333bcb09dd9f3b30e94b1891d778a3082476d
-
SHA256
094a3f9f5c4ee02bd9313c22b493a12c1f5281e3611f1264777881e394aad2d8
-
SHA512
52a181bc5920d02d663adae674f9de3c8698ad354a5725e442ab1b42f89d75544d4ff7c8e98936e5aa03196e3918153cd59740ab6b16aba80f6bccdea30aa686
-
SSDEEP
12288:dVWgsTfq3Y2I0GLm3GwEfc+MvcZ3Tif6fvLAGRjnvkziI9C:dVWgsTkI0wm3G/icBiCfvLTRLkzi/
Malware Config
Signatures
Files
-
094a3f9f5c4ee02bd9313c22b493a12c1f5281e3611f1264777881e394aad2d8.exe windows x86
c07acfa12812e23341e85e9580f6c7ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
kernel32
GetCurrentProcess
HeapReAlloc
GetEnvironmentStringsW
GetStringTypeA
LoadLibraryA
SetEnvironmentVariableA
HeapFree
FlushFileBuffers
HeapAlloc
GetConsoleCP
CreateMutexA
GetVersionExA
CreateNamedPipeW
GetTickCount
DuplicateHandle
SetFilePointer
IsDebuggerPresent
IsValidLocale
LCMapStringW
GetLocaleInfoW
TerminateProcess
FreeLibrary
GetDiskFreeSpaceW
GetCPInfo
GetCurrentProcessId
TlsSetValue
GetCurrentThreadId
GetStartupInfoA
LCMapStringA
VirtualAlloc
TlsGetValue
HeapCreate
CloseHandle
TlsAlloc
InterlockedDecrement
GetTimeZoneInformation
Sleep
GetCommandLineW
GetConsoleMode
LocalHandle
OpenMutexA
EnterCriticalSection
WideCharToMultiByte
HeapSize
WriteConsoleW
FreeEnvironmentStringsA
GetStartupInfoW
IsValidCodePage
GetEnvironmentStrings
GetModuleHandleA
WriteConsoleA
LeaveCriticalSection
UnhandledExceptionFilter
SetLastError
InitializeCriticalSection
GetConsoleOutputCP
HeapDestroy
VirtualQuery
GetProcAddress
GetStdHandle
SetConsoleCtrlHandler
RtlUnwind
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeW
SetUnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsW
VirtualFree
ReadFile
InterlockedIncrement
GetFileType
SetHandleCount
MultiByteToWideChar
LoadLibraryExW
CreateFileA
EnumSystemLocalesA
ExitProcess
InterlockedExchange
GetModuleFileNameA
WriteFile
GetUserDefaultLCID
DeleteCriticalSection
CompareStringA
TlsFree
GetCurrentThread
GetLastError
GetOEMCP
GetACP
GetTimeFormatA
GetShortPathNameA
GetDateFormatA
GetCommandLineA
CompareStringW
GetProcessHeap
SetStdHandle
QueryPerformanceCounter
user32
MonitorFromPoint
LoadMenuA
ChangeDisplaySettingsExW
RegisterDeviceNotificationA
GetClassInfoW
GetClipboardFormatNameA
SetWindowsHookA
GetKeyboardLayoutNameW
OemToCharW
GetUpdateRect
SetWindowPos
InsertMenuItemA
EnumPropsExW
GetWindowPlacement
GetNextDlgGroupItem
GetAsyncKeyState
ChangeMenuA
LoadKeyboardLayoutW
GrayStringA
FillRect
RegisterClassExA
ArrangeIconicWindows
GetWindowThreadProcessId
OpenWindowStationA
SendMessageTimeoutW
CopyAcceleratorTableA
AnimateWindow
MapVirtualKeyExA
EndMenu
LoadMenuIndirectA
GetMenuItemRect
LoadStringA
RegisterClassA
PostMessageA
SetWindowTextW
wininet
InternetSetDialStateA
InternetCombineUrlW
gdi32
EndPage
CreateRectRgnIndirect
EnumICMProfilesW
RealizePalette
GetTextExtentPoint32W
UpdateColors
SetTextAlign
SetROP2
GetMetaFileA
CreateFontA
comctl32
ImageList_SetFlags
ImageList_EndDrag
ImageList_AddMasked
ImageList_Draw
CreatePropertySheetPageA
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageRect
ImageList_SetDragCursorImage
CreateStatusWindow
InitCommonControlsEx
GetEffectiveClientRect
CreateStatusWindowA
ImageList_SetImageCount
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ