Static task
static1
Behavioral task
behavioral1
Sample
2a8d4c8b787251c07326e18f3b3d4a6d6516bc5567b1ea6094ed3d5d789d0825.exe
Resource
win7-20220812-en
General
-
Target
2a8d4c8b787251c07326e18f3b3d4a6d6516bc5567b1ea6094ed3d5d789d0825
-
Size
945KB
-
MD5
0504aa47c8131965eb8674007705d930
-
SHA1
c2180459799c8951b26abf7cf1de6dde2794dc8d
-
SHA256
2a8d4c8b787251c07326e18f3b3d4a6d6516bc5567b1ea6094ed3d5d789d0825
-
SHA512
30a87c2d38365974d1957d4f66c929ddaab25016a2a6a1dbe0317273eb62174803a0e62519777abba959be51b9d52ebb30cab7387168a944a7a814d49749f880
-
SSDEEP
12288:gkes1Sqq4bwwY0x2P/WX85447/AQjpcVJqs0h9v+OqDGETstHs+gnF/a/xjrx:gk51SqqKwwYt9/AQvLvQaETKgF/+xjrx
Malware Config
Signatures
Files
-
2a8d4c8b787251c07326e18f3b3d4a6d6516bc5567b1ea6094ed3d5d789d0825.exe windows x86
deff81d09dd1bcdf2bd72d39e61e4d55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
kernel32
OpenFileMappingW
UnmapViewOfFile
LocalFree
OpenMutexW
CreateMutexW
GetFullPathNameW
GetCPInfo
MapViewOfFile
DeviceIoControl
ProcessIdToSessionId
GlobalFree
GetDriveTypeW
lstrlenA
ExitProcess
SetEndOfFile
CreateDirectoryW
GetFileType
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
HeapCreate
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
LeaveCriticalSection
LCMapStringA
GetModuleHandleA
RtlUnwind
GetStartupInfoW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
FreeEnvironmentStringsA
SetEnvironmentVariableA
SetLastError
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
FindClose
FindFirstFileW
InterlockedDecrement
InterlockedIncrement
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
Sleep
VirtualAlloc
ReadFile
CreateFileMappingW
GetPrivateProfileStringW
GetPrivateProfileIntW
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
GetTickCount
FindNextFileW
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSection
GetFileSize
CopyFileW
SetFilePointer
GetVersionExW
SetUnhandledExceptionFilter
GetCurrentProcessId
DeleteFileW
WriteFile
FreeLibrary
CreateFileA
VirtualQueryEx
GetModuleFileNameA
ReadProcessMemory
VirtualQuery
GetThreadSelectorEntry
GetCurrentThread
WritePrivateProfileStringW
MulDiv
LoadLibraryW
GetModuleFileNameW
GetCommandLineW
GetLongPathNameW
GetProcAddress
TerminateThread
MultiByteToWideChar
GetCurrentThreadId
IsDebuggerPresent
RaiseException
CloseHandle
CreateFileW
GetLastError
ReleaseMutex
WaitForSingleObject
CreateThread
GetDriveTypeA
LCMapStringW
GetEnvironmentStrings
user32
GetClassInfoExW
RegisterClassExW
DefWindowProcW
UnregisterClassW
MonitorFromPoint
FillRect
PostMessageW
RedrawWindow
EnableWindow
GetSystemMetrics
ScrollWindow
SetScrollPos
SetPropW
GetDesktopWindow
UpdateLayeredWindow
OffsetRect
SetClipboardData
ShowScrollBar
SetScrollInfo
GetParent
RegisterClipboardFormatW
GetClipboardData
WindowFromPoint
DispatchMessageW
TranslateMessage
GetMessageW
SystemParametersInfoW
SetForegroundWindow
IsIconic
IsWindowVisible
GetCapture
ShowWindow
CreateDialogParamW
SetWindowRgn
MoveWindow
UnregisterClassA
GetPropW
GetWindowLongW
GetDlgItem
LoadImageW
SendMessageW
SetWindowTextW
LoadIconW
DestroyIcon
CopyRect
DestroyWindow
LoadBitmapW
ShowCursor
SetWindowPos
CreateWindowExW
IsWindow
ReleaseDC
SetCursor
GetMessageExtraInfo
EnumClipboardFormats
SetWindowLongW
CloseClipboard
ClientToScreen
EmptyClipboard
OpenClipboard
PtInRect
GetCursorPos
GetWindowRect
ScreenToClient
EndPaint
GetDC
BeginPaint
GetClientRect
PostQuitMessage
DrawTextW
KillTimer
SetTimer
UpdateWindow
InvalidateRect
TrackMouseEvent
LoadCursorW
SendInput
GetMonitorInfoW
GetWindow
gdi32
GetDIBits
SetStretchBltMode
SetDIBitsToDevice
SaveDC
RestoreDC
GetClipBox
Rectangle
PatBlt
CreateFontIndirectW
GetDeviceCaps
GetStockObject
StretchBlt
GetObjectW
CreateRoundRectRgn
SetTextColor
SetBkMode
BitBlt
CreatePen
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetBkColor
CreateFontW
ExtTextOutW
DeleteDC
LineTo
DeleteObject
MoveToEx
CreateSolidBrush
CreateDIBSection
advapi32
GetSecurityInfo
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExA
LookupAccountNameW
ConvertSidToStringSidW
RegSetValueExW
LookupAccountSidW
GetTokenInformation
shell32
ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ole32
StgCreateDocfile
StgOpenStorageOnILockBytes
CoUninitialize
CoCreateGuid
CoInitialize
CreateILockBytesOnHGlobal
CoTaskMemFree
StgOpenStorage
shlwapi
PathRemoveFileSpecW
PathFileExistsW
comctl32
_TrackMouseEvent
ord17
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
ws2_32
WSACleanup
htons
sendto
gethostbyname
socket
closesocket
WSAStartup
netapi32
Netbios
NetApiBufferFree
NetWkstaTransportEnum
Sections
.text Size: 596KB - Virtual size: 595KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE