Static task
static1
Behavioral task
behavioral1
Sample
f02d8159a9436351f7b524ce52b108cbd6634c00813f36e0c4185d8d33524daf.exe
Resource
win7-20220812-en
General
-
Target
f02d8159a9436351f7b524ce52b108cbd6634c00813f36e0c4185d8d33524daf
-
Size
926KB
-
MD5
67ef77aeaa683a37a80bfa2458945ade
-
SHA1
72a37d791e9b495da5c1414dd0e56a7aa5ad53b7
-
SHA256
f02d8159a9436351f7b524ce52b108cbd6634c00813f36e0c4185d8d33524daf
-
SHA512
993880bbc32596fdad67ad8805e302f35d2c54abff863ca1cc6d866fad385700fa7163576075b0834ddb5a88827f3671e2657d832801884d111a5181b73e6088
-
SSDEEP
12288:yFOxkO2uswdyOWx0AtM2L7kAEoFOsW669BAlqB92b2YNUQ2PdVmS9NrC:liO2HAyO7Atp7k7QlqT2b2w4dBN
Malware Config
Signatures
Files
-
f02d8159a9436351f7b524ce52b108cbd6634c00813f36e0c4185d8d33524daf.exe windows x86
ebea3fd082439f103b9025647484718d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
CreateNamedPipeA
CreateFileW
OpenFileMappingW
LocalFlags
TlsGetValue
CreateNamedPipeW
GetModuleFileNameW
TlsAlloc
CompareFileTime
CreateDirectoryW
_hread
CancelIo
GetExitCodeProcess
GlobalAlloc
lstrcmpA
GetDefaultCommConfigA
EndUpdateResourceA
ConvertDefaultLocale
DeleteFileW
_hwrite
SetFilePointer
AssignProcessToJobObject
CreateMailslotW
SystemTimeToFileTime
WritePrivateProfileSectionW
GetSystemPowerStatus
UnhandledExceptionFilter
GetProcessVersion
GetDateFormatW
SetProcessShutdownParameters
SetThreadLocale
EnumLanguageGroupLocalesA
Thread32First
FindAtomW
GetCurrentProcess
SetEnvironmentVariableW
GetTimeFormatA
BackupWrite
GetThreadTimes
SetFileTime
GetPrivateProfileSectionNamesW
GetTempFileNameW
WaitNamedPipeA
WaitForMultipleObjects
OpenWaitableTimerA
PrepareTape
GetProcessHeaps
DeleteTimerQueueEx
GetCurrencyFormatW
GetDiskFreeSpaceExA
DeleteVolumeMountPointA
SetTapeParameters
CreateHardLinkA
LocalCompact
WaitCommEvent
ExpandEnvironmentStringsW
lstrcmpiA
GlobalFree
LocalFree
CreateJobObjectA
SetNamedPipeHandleState
MulDiv
lstrcatW
GetBinaryTypeA
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
LockFileEx
FileTimeToLocalFileTime
DeleteTimerQueue
GetUserDefaultUILanguage
VerifyVersionInfoW
FreeEnvironmentStringsA
IsProcessorFeaturePresent
FindResourceExA
GetFileInformationByHandle
GetTickCount
GlobalFix
EnumResourceLanguagesW
SetSystemTimeAdjustment
FindNextChangeNotification
GetSystemDefaultLangID
CreateDirectoryExA
CreateWaitableTimerA
ResetWriteWatch
SwitchToThread
GetModuleHandleW
SetFileAttributesA
LocalShrink
TlsFree
GetModuleHandleA
SetTimerQueueTimer
InterlockedExchange
GetDefaultCommConfigW
SetThreadPriorityBoost
SetThreadIdealProcessor
GetModuleFileNameA
EnumUILanguagesA
VerSetConditionMask
lstrlenW
RtlUnwind
IsValidLocale
GetStringTypeExW
OpenWaitableTimerW
SetEvent
lstrlenA
lstrcatA
IsBadCodePtr
ReadDirectoryChangesW
SetErrorMode
CreateIoCompletionPort
GetLocalTime
GetCalendarInfoA
EnumSystemLanguageGroupsA
GetFileSize
CreateSemaphoreW
GetSystemDefaultUILanguage
TlsSetValue
GetFileAttributesA
user32
TabbedTextOutW
UnregisterDeviceNotification
GetKeyboardLayoutNameW
CreateIcon
TrackPopupMenu
MapVirtualKeyA
PostThreadMessageA
IsCharAlphaNumericW
DdeCreateDataHandle
GetCapture
UnionRect
PostQuitMessage
DefWindowProcA
UserHandleGrantAccess
CreateIconIndirect
DdeImpersonateClient
NotifyWinEvent
SendMessageW
SetDlgItemInt
GetCaretPos
GetClassWord
ImpersonateDdeClientWindow
IMPGetIMEW
MessageBoxW
SetWindowLongW
CharLowerW
shlwapi
PathCombineA
PathAppendA
Sections
.text Size: 263KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 336KB - Virtual size: 691KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ