Static task
static1
Behavioral task
behavioral1
Sample
a194374b5abd67959f6b043c60801ad8c83d6898e264ed7d52b1335ac9cf0878.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a194374b5abd67959f6b043c60801ad8c83d6898e264ed7d52b1335ac9cf0878.exe
Resource
win10v2004-20220812-en
General
-
Target
a194374b5abd67959f6b043c60801ad8c83d6898e264ed7d52b1335ac9cf0878
-
Size
564KB
-
MD5
04c88479a1dea319e113c336db66f98b
-
SHA1
2a77e984ff061d9f55555c239bf8b2c687df71f3
-
SHA256
a194374b5abd67959f6b043c60801ad8c83d6898e264ed7d52b1335ac9cf0878
-
SHA512
33421b87c95de2f65189fb5da32e156ff4c8d9895bccffbe0439e5457f36173c08a633ee0c3c1cdde3bc067faece6749cf3328ee8eb7832d71a3adfd59d24076
-
SSDEEP
12288:SSX2vSUmJHoqpDJ1LFFMbFzKEKGDSCuCkLuKRzdv73WAv8XifEeSRR:SFvCHoC1LE8GiluKRhj37d
Malware Config
Signatures
Files
-
a194374b5abd67959f6b043c60801ad8c83d6898e264ed7d52b1335ac9cf0878.exe windows x86
33f095f83d5d5f0c75e630ea3e96b603
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SwapMouseButton
VkKeyScanW
CreateMDIWindowW
SwitchToThisWindow
CreateWindowExW
DrawFocusRect
CallMsgFilterA
AttachThreadInput
ShowWindow
SetScrollPos
MsgWaitForMultipleObjects
CreateIconFromResourceEx
SwitchDesktop
SendIMEMessageExA
GetIconInfo
SetScrollInfo
FlashWindowEx
RegisterClassExA
UnhookWindowsHookEx
ReplyMessage
CreateAcceleratorTableA
DestroyWindow
RegisterClassA
DefWindowProcW
MessageBoxW
VkKeyScanA
DlgDirSelectExA
kernel32
lstrlenA
SetFileAttributesA
HeapReAlloc
GetModuleFileNameA
SetEnvironmentVariableA
WaitNamedPipeW
GetStringTypeA
GetPrivateProfileStructA
CompareStringA
GetEnvironmentStrings
ReadFile
OpenMutexA
GetCurrentProcessId
lstrcatW
CreateRemoteThread
FlushFileBuffers
CreateFileA
GetSystemInfo
ReadConsoleW
lstrcatA
UnmapViewOfFile
GetCurrentProcess
GetPrivateProfileIntA
SetStdHandle
HeapCreate
TlsGetValue
EnumSystemCodePagesA
TlsSetValue
GetLocaleInfoA
LeaveCriticalSection
EnumResourceLanguagesA
IsBadWritePtr
FreeEnvironmentStringsW
WriteFile
GetVersionExA
SetConsoleMode
VirtualAlloc
HeapAlloc
CreateMutexA
GetEnvironmentVariableW
ReadConsoleOutputA
InterlockedCompareExchange
GetOEMCP
UnhandledExceptionFilter
GetTimeZoneInformation
lstrcpyA
RemoveDirectoryA
lstrcmpW
GetDiskFreeSpaceExW
TerminateProcess
GetCPInfo
WideCharToMultiByte
GetThreadSelectorEntry
EnumCalendarInfoA
SetConsoleCursorInfo
GetWindowsDirectoryA
SetHandleCount
RtlUnwind
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetCurrentThread
LoadLibraryA
CreateToolhelp32Snapshot
CreateDirectoryExA
LCMapStringW
LCMapStringA
GetTickCount
FreeEnvironmentStringsA
GetStdHandle
FormatMessageW
FoldStringW
EnterCriticalSection
EnumTimeFormatsW
GetTimeFormatA
VirtualFree
InitializeCriticalSection
GetFileType
TlsFree
GetSystemDefaultLangID
GetDateFormatA
FillConsoleOutputAttribute
lstrcmpiA
HeapLock
OutputDebugStringA
FillConsoleOutputCharacterW
UnlockFileEx
MultiByteToWideChar
DeleteAtom
InterlockedExchange
SetCurrentDirectoryA
CreateFileMappingW
GetCurrentThreadId
EnumSystemLocalesA
lstrcpyW
GetConsoleCP
HeapDestroy
GetStartupInfoA
LocalReAlloc
SetFilePointer
VirtualFreeEx
WritePrivateProfileStructW
IsValidCodePage
GetSystemTimeAsFileTime
LocalCompact
SetConsoleTitleA
HeapSize
DeleteCriticalSection
VirtualProtect
ExitProcess
WaitNamedPipeA
SystemTimeToTzSpecificLocalTime
SetTimeZoneInformation
GetAtomNameW
QueryPerformanceCounter
SetLastError
GetCommandLineA
lstrcat
SetThreadLocale
HeapFree
GetThreadLocale
GetLocaleInfoW
GetModuleHandleA
VirtualQuery
GetProfileStringA
GetProcAddress
GetStringTypeW
GetUserDefaultLCID
CloseHandle
TlsAlloc
IsValidLocale
ExpandEnvironmentStringsW
SetEnvironmentVariableW
WaitForMultipleObjectsEx
SetPriorityClass
GetACP
GetFileAttributesExA
CreateNamedPipeW
CompareStringW
LocalAlloc
GetLastError
comctl32
CreateUpDownControl
InitCommonControlsEx
comdlg32
PrintDlgW
Sections
.text Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ