Static task
static1
Behavioral task
behavioral1
Sample
aa3ff27d2afa2d8a369e4abe65a4fbd421ad7e6d53c928180e842278b6df3294.exe
Resource
win7-20220812-en
General
-
Target
aa3ff27d2afa2d8a369e4abe65a4fbd421ad7e6d53c928180e842278b6df3294
-
Size
353KB
-
MD5
0f80ae8017c6a71e1b6422c24040d370
-
SHA1
346dfd91bcd367bc7ff3ad0b3522d9d1ce20b294
-
SHA256
aa3ff27d2afa2d8a369e4abe65a4fbd421ad7e6d53c928180e842278b6df3294
-
SHA512
ea3e6d8e38bbb93c6cfd0d8c145ea708bc40d701f76404a3e5662b1ef110a4168f4753571a83d36f832a6b03f2304ab4cda46496aa7a64547b14adbd412c09c1
-
SSDEEP
6144:8EIqos+RMuC+HNWWCKsfey6lC+8wAcy4dLLWkIt7S9SuI:8EIqon0+yKsWCvWn6xS9S
Malware Config
Signatures
Files
-
aa3ff27d2afa2d8a369e4abe65a4fbd421ad7e6d53c928180e842278b6df3294.exe windows x86
7caff076d9f650cf3c16a69fe3f3f79f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
FindResourceExA
CreateProcessA
FlushInstructionCache
GetCurrentProcess
GlobalSize
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetLastError
FreeLibrary
LoadLibraryA
WritePrivateProfileStringA
WritePrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetShortPathNameA
GetModuleFileNameA
lstrcmpiA
SetUnhandledExceptionFilter
GetCommandLineA
SizeofResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
lstrcatA
FindClose
VirtualQuery
VirtualProtect
FindFirstFileA
SearchPathA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
QueryPerformanceCounter
SystemTimeToFileTime
lstrcmpA
RemoveDirectoryA
CompareStringW
SetEndOfFile
GlobalReAlloc
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
IsBadCodePtr
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
CompareStringA
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceA
GetFileSize
SetFilePointer
GetTempPathA
GetTempFileNameA
CopyFileA
ReadFile
DeleteFileA
CreateFileA
GetVersionExA
GetFileAttributesA
GetPrivateProfileStringA
QueryPerformanceFrequency
InterlockedDecrement
Sleep
WriteFile
SetFileTime
FormatMessageA
LocalFree
lstrcpyA
WideCharToMultiByte
GetTickCount
GetCurrentThreadId
HeapCreate
ExitProcess
GetVersion
GetStartupInfoA
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
lstrlenA
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InterlockedIncrement
MultiByteToWideChar
WaitForSingleObject
ResetEvent
GetLastError
SetEvent
CreateEventA
CreateThread
FindNextFileA
CloseHandle
user32
TranslateMessage
PeekMessageA
MessageBoxA
LoadStringA
GetDesktopWindow
wsprintfA
DefWindowProcA
DestroyWindow
SetWindowLongA
GetWindowLongA
CallWindowProcA
CreateWindowExA
CharLowerBuffA
RegisterClassExA
DispatchMessageA
IsWindow
PostMessageA
MsgWaitForMultipleObjects
SendMessageA
GetMessageA
CharNextA
PostThreadMessageA
GetClassInfoExA
LoadCursorA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegCloseKey
CryptReleaseContext
CryptAcquireContextA
CryptDestroyKey
CryptDestroyHash
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ole32
CoCreateGuid
CLSIDFromProgID
CoCreateInstance
StringFromCLSID
StringFromGUID2
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
ProgIDFromCLSID
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoUninitialize
oleaut32
GetErrorInfo
DispCallFunc
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
SysFreeString
SysAllocStringLen
SysStringLen
SysAllocString
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
VariantClear
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
crypt32
CertCloseStore
CryptMsgClose
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE