Static task
static1
Behavioral task
behavioral1
Sample
a945db430604bc1c4e3ef7977ee4c90df1453cc77e333b19f2f9a0a2d4c0f55a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a945db430604bc1c4e3ef7977ee4c90df1453cc77e333b19f2f9a0a2d4c0f55a.exe
Resource
win10v2004-20220901-en
General
-
Target
a945db430604bc1c4e3ef7977ee4c90df1453cc77e333b19f2f9a0a2d4c0f55a
-
Size
69KB
-
MD5
05f0c1b267940dc9c6547974bd7478c0
-
SHA1
15473eeb81a751cc95cb3c986d238c510c217f9e
-
SHA256
a945db430604bc1c4e3ef7977ee4c90df1453cc77e333b19f2f9a0a2d4c0f55a
-
SHA512
18867216fe11bde5330a1e803d998be614a9389abc4879248a9a700793a6aed304e373b63129e71e783b656b3cd36ebc8ee1512b08177e4229a1be1218f05354
-
SSDEEP
768:NAvEmr5x+ZvMrxgfG4Y/aGzEqdfdh22C+BH7sFpCKcKPpTsamrVR+AwBW6sQ:1mrJ1p4ZGzjdfW2jbJKxsLdL63
Malware Config
Signatures
Files
-
a945db430604bc1c4e3ef7977ee4c90df1453cc77e333b19f2f9a0a2d4c0f55a.exe windows x86
b2b6ad11c446a984b8486bf4e6897d88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
CreateFontIndirectW
SelectObject
SetBkColor
SetTextColor
DeleteObject
user32
EndPaint
LoadStringW
DrawTextExW
GetSysColor
SendMessageW
BeginPaint
PostMessageW
DefWindowProcW
GetMessageExtraInfo
ShowCursor
PostQuitMessage
DestroyWindow
MoveWindow
InvalidateRect
UnregisterClassW
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
GetWindowLongW
CreateWindowExW
RegisterClassExW
EnumDisplayMonitors
EnumDisplayDevicesW
GetMonitorInfoW
FindWindowW
IsIconic
SetForegroundWindow
LoadIconW
LoadCursorW
SendMessageTimeoutW
msvcrt
__p__fmode
memset
??_V@YAXPAX@Z
??3@YAXPAX@Z
??_U@YAPAXI@Z
memcpy
??2@YAPAXI@Z
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
__CxxFrameHandler3
_vsnwprintf
_amsg_exit
__setusermatherr
__p__commode
__set_app_type
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_except_handler4_common
_controlfp
ntdll
EtwTraceMessage
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
api-ms-win-core-heap-l1-1-0
HeapSetInformation
api-ms-win-core-interlocked-l1-1-0
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
api-ms-win-core-libraryloader-l1-1-0
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
api-ms-win-core-misc-l1-1-0
lstrlenW
LocalFree
lstrcmpW
Sleep
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineW
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
GetStartupInfoW
GetCurrentThreadId
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
GetSystemTimeAsFileTime
ole32
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx
imm32
ImmDisableTextFrameService
shell32
CommandLineToArgvW
kernel32
RegSetValueExW
RegCreateKeyExW
MulDiv
RegisterApplicationRestart
DelayLoadFailureHook
RegOpenKeyExW
RegCloseKey
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE