Static task
static1
Behavioral task
behavioral1
Sample
1acd59bb3083717a05d9b7654862f19f28386088ebc7965ad78cb38c30e6640b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1acd59bb3083717a05d9b7654862f19f28386088ebc7965ad78cb38c30e6640b.exe
Resource
win10v2004-20220901-en
General
-
Target
1acd59bb3083717a05d9b7654862f19f28386088ebc7965ad78cb38c30e6640b
-
Size
568KB
-
MD5
0e0e734f601266a853e9a02fa2b5a8bf
-
SHA1
2f9613cb4d9ae280fa0bb587983799c0948855d1
-
SHA256
1acd59bb3083717a05d9b7654862f19f28386088ebc7965ad78cb38c30e6640b
-
SHA512
8517a5ab60debf1985fbce65068b21e5b17df84b474b3a416e53e3e75367380136ed1349b9dbd51ba84964b8a1b9a5a316e912c00ac8880ac628d156b58a6812
-
SSDEEP
12288:1FTeB9hW0cKoditKl3ak0+WsenWSif2PaP5A7WH7+/:jTetW6Klt0xsLSnh7A7+/
Malware Config
Signatures
Files
-
1acd59bb3083717a05d9b7654862f19f28386088ebc7965ad78cb38c30e6640b.exe windows x86
730e6927b216a589556926402c84eb8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
FillConsoleOutputAttribute
SetEnvironmentVariableA
GetDiskFreeSpaceExW
GetCalendarInfoA
WaitForMultipleObjects
LeaveCriticalSection
InterlockedCompareExchange
GlobalUnlock
LoadLibraryExA
SetFilePointer
VirtualAlloc
GetStringTypeW
GetFileType
Sleep
InterlockedIncrement
GetStringTypeA
SetConsoleCtrlHandler
ReadFile
GetStdHandle
CreateWaitableTimerW
GetPrivateProfileStructA
GetLocaleInfoW
GetFileTime
FreeEnvironmentStringsW
SetLastError
ExitProcess
CompareStringA
GetFileAttributesW
GetCommandLineA
GetCurrentThread
GetModuleFileNameA
TerminateProcess
CompareStringW
InterlockedDecrement
SystemTimeToFileTime
GetStartupInfoA
GetCurrentThreadId
lstrlenA
LocalFileTimeToFileTime
QueryPerformanceCounter
WriteFile
RtlUnwind
LCMapStringW
InitializeCriticalSection
GetCurrentProcessId
SetLocaleInfoA
GetTickCount
CloseHandle
UnhandledExceptionFilter
GetEnvironmentStrings
GetCommandLineW
lstrcmpi
SetHandleCount
GetLocalTime
GetCurrentProcess
TlsAlloc
LoadResource
GetTimeZoneInformation
DeleteCriticalSection
GetSystemTime
TransmitCommChar
lstrcmpiA
GlobalDeleteAtom
LCMapStringA
ResetEvent
OpenMutexW
GetCPInfo
ReadConsoleW
LoadLibraryA
TlsSetValue
CreateDirectoryW
VirtualQuery
CreateSemaphoreW
GetStartupInfoW
GetLastError
HeapReAlloc
WideCharToMultiByte
FreeEnvironmentStringsA
GetModuleFileNameW
HeapDestroy
GetEnvironmentStringsW
GetSystemTimeAsFileTime
EnumResourceTypesW
SetStdHandle
GetModuleHandleA
GetSystemTimeAdjustment
TlsFree
VirtualFree
TlsGetValue
InterlockedExchange
HeapAlloc
EnumSystemCodePagesW
CreateMutexA
OpenMutexA
HeapFree
GetLocaleInfoA
HeapCreate
GetDateFormatA
GetSystemDirectoryA
SetTimeZoneInformation
CreateToolhelp32Snapshot
WriteConsoleOutputCharacterW
GetProcAddress
GetFullPathNameA
IsBadWritePtr
FlushFileBuffers
WaitCommEvent
GetProcessHeaps
EnterCriticalSection
MultiByteToWideChar
OpenSemaphoreW
GlobalFindAtomW
user32
RegisterClassA
DdeCreateStringHandleW
InsertMenuA
SubtractRect
CreateDialogParamA
MessageBoxA
SetProcessWindowStation
DefWindowProcA
GetClipboardData
AnyPopup
EndDeferWindowPos
GetNextDlgGroupItem
ShowWindow
GetForegroundWindow
RegisterClassExA
DestroyWindow
ScrollWindowEx
DefDlgProcW
CreateWindowExA
MsgWaitForMultipleObjects
DrawStateA
GetLastActivePopup
GetCapture
CloseWindow
GetOpenClipboardWindow
SetClassWord
LoadKeyboardLayoutA
GetKeyboardType
ToAscii
SetThreadDesktop
comdlg32
GetFileTitleW
ReplaceTextW
comctl32
ImageList_Write
ImageList_GetBkColor
InitCommonControlsEx
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ