Static task
static1
Behavioral task
behavioral1
Sample
0408ba6ab2ec473cdbcbafad5a2e81c66cfefaaea48cc57ae39fda12f8071ee6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0408ba6ab2ec473cdbcbafad5a2e81c66cfefaaea48cc57ae39fda12f8071ee6.exe
Resource
win10v2004-20220812-en
General
-
Target
0408ba6ab2ec473cdbcbafad5a2e81c66cfefaaea48cc57ae39fda12f8071ee6
-
Size
332KB
-
MD5
06fab36aae7026ab72fc7cc122404f6d
-
SHA1
2f38aaee6492904c7421741bb56daae21d35a714
-
SHA256
0408ba6ab2ec473cdbcbafad5a2e81c66cfefaaea48cc57ae39fda12f8071ee6
-
SHA512
fe24129d917c0e74c694e24a9054d62ae6febc10dbaddb81e823df6dabea57de05a10ac94c06b01febf372fb899013e196679dc77f0660b99491cc2f8dc1659d
-
SSDEEP
6144:rYgRZsfDkYAO/TlRGj8pjBu/YzignPhdtb0jIg8caeRJMiKEo3:rvsbdGQpjKKiOPh0l8c/mO
Malware Config
Signatures
Files
-
0408ba6ab2ec473cdbcbafad5a2e81c66cfefaaea48cc57ae39fda12f8071ee6.exe windows x86
922ab1aab72501ff671ce61271cf9710
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStructA
FreeEnvironmentStringsA
FindFirstFileExA
FreeEnvironmentStringsW
CompareStringA
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
OpenProcess
GetComputerNameW
ReadConsoleOutputW
ExitProcess
SetEvent
TlsFree
GetStartupInfoA
GetCurrentThreadId
GetCommandLineW
GetLongPathNameA
SetFileTime
UnmapViewOfFile
WriteConsoleOutputCharacterW
HeapDestroy
GetTimeZoneInformation
GetCalendarInfoW
TlsSetValue
FindResourceExW
GetProfileStringA
GetDriveTypeW
DebugBreak
WriteProfileStringA
GetPrivateProfileStructA
QueryPerformanceCounter
SetStdHandle
GetEnvironmentStrings
GetFileSize
EnterCriticalSection
GetLocalTime
ConvertDefaultLocale
GetTickCount
VirtualQuery
HeapCreate
SetHandleCount
FlushFileBuffers
VirtualAlloc
RtlFillMemory
GetDiskFreeSpaceExA
LeaveCriticalSection
lstrcmpW
CreateSemaphoreA
GetTempPathW
FreeLibrary
ReadFile
SetEnvironmentVariableA
GetShortPathNameW
TerminateThread
GetStringTypeA
EnumResourceNamesA
GetConsoleOutputCP
GetCPInfo
GetPriorityClass
GetAtomNameA
GetStdHandle
SetFilePointer
LoadLibraryA
GetEnvironmentStringsW
GetCurrentProcess
CompareStringW
GlobalUnlock
OpenMutexA
InitializeCriticalSection
GetConsoleTitleW
HeapReAlloc
GetModuleFileNameA
SetLastError
TerminateProcess
DeleteCriticalSection
IsDebuggerPresent
InterlockedIncrement
SetVolumeLabelW
SetTimeZoneInformation
CloseHandle
FlushInstructionCache
GetCommandLineA
ConnectNamedPipe
IsBadReadPtr
SetThreadContext
WritePrivateProfileStringA
GetPrivateProfileSectionNamesW
WriteFile
GetLastError
GetCurrencyFormatW
GetCurrentThread
CreateMutexA
HeapFree
DeleteFileW
GetNamedPipeInfo
GetFileType
FillConsoleOutputCharacterW
GetExitCodeProcess
InterlockedDecrement
GlobalUnfix
TlsAlloc
TlsGetValue
GetCurrencyFormatA
HeapAlloc
SetThreadIdealProcessor
UnhandledExceptionFilter
GetVersionExW
GetCurrentDirectoryA
IsBadWritePtr
RtlUnwind
InterlockedExchange
LCMapStringA
GetVersion
VirtualFreeEx
GetProcAddress
FreeLibraryAndExitThread
GetModuleFileNameW
VirtualFree
GetSystemTime
GetStartupInfoW
LCMapStringW
GetPrivateProfileSectionA
EnumSystemCodePagesA
LoadResource
GetACP
FileTimeToSystemTime
GetModuleHandleA
SetConsoleOutputCP
GetStringTypeW
ReadConsoleW
FindAtomA
SetCurrentDirectoryW
GetCurrentProcessId
comctl32
ImageList_GetBkColor
ImageList_SetDragCursorImage
ImageList_GetFlags
ImageList_Remove
InitCommonControlsEx
CreateStatusWindowA
user32
DrawTextExW
DestroyWindow
CharNextW
CallMsgFilterA
DestroyMenu
CreateIconFromResourceEx
TranslateMessage
CreateWindowExA
DefWindowProcW
ClipCursor
EnumDesktopWindows
MessageBoxA
ExcludeUpdateRgn
ShowWindow
LoadCursorFromFileW
OemKeyScan
GetKeyboardType
DdeDisconnectList
InsertMenuItemA
GetClassInfoW
RegisterClassExA
EnumDisplayDevicesA
DdePostAdvise
MapVirtualKeyExA
VkKeyScanA
UnregisterHotKey
EnumWindowStationsA
CreateDesktopW
RegisterClassA
SendIMEMessageExA
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ