Static task
static1
Behavioral task
behavioral1
Sample
ab8aa9eb6aaddaf82d155dfc1c40f0089e0091b9496b72f1938f7137444caa6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab8aa9eb6aaddaf82d155dfc1c40f0089e0091b9496b72f1938f7137444caa6b.exe
Resource
win10v2004-20220812-en
General
-
Target
ab8aa9eb6aaddaf82d155dfc1c40f0089e0091b9496b72f1938f7137444caa6b
-
Size
352KB
-
MD5
2497a02ea61d6101ba33abd862dee154
-
SHA1
f0a32f58c90e82760f4b5511924614eadd99de5a
-
SHA256
ab8aa9eb6aaddaf82d155dfc1c40f0089e0091b9496b72f1938f7137444caa6b
-
SHA512
26a8e338615b8479d81b8e7d5c136124a2866ff074a8d24d51a8e46f8622b2cf1a12cbaa6532078809cd649805d1397de4c63d1c37bc4e191bd91dff4ea0ca8e
-
SSDEEP
6144:D16a5u3ONAO/v2zkj2IWRVVTokX2eWH//DmnP3Mx7uVf3:x6j3ONV2zgDWdTD29H3DmnP8x7uVP
Malware Config
Signatures
Files
-
ab8aa9eb6aaddaf82d155dfc1c40f0089e0091b9496b72f1938f7137444caa6b.exe windows x86
ee291c6a1c424664975743be62390a63
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
ShowWindow
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
ScreenToClient
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
EndDialog
LoadBitmapA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
comdlg32
CommDlgExtendedError
GetSaveFileNameA
PrintDlgA
ChooseColorA
ChooseFontA
FindTextA
ReplaceTextA
GetOpenFileNameA
GetFileTitleA
ole32
CoGetMalloc
OleGetClipboard
CoRegisterClassObject
StgOpenStorageOnILockBytes
CoRevokeClassObject
ReleaseStgMedium
CoLockObjectExternal
RegisterDragDrop
CreateStreamOnHGlobal
CoTaskMemFree
CLSIDFromProgID
OleRegGetMiscStatus
GetRunningObjectTable
WriteClassStg
CreateItemMoniker
OleRun
OleIsRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateFileMoniker
OleSaveToStream
RevokeDragDrop
CreateOleAdviseHolder
CreateDataAdviseHolder
OleUninitialize
OleInitialize
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateBindCtx
OleDuplicateData
CoTaskMemAlloc
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CoFreeUnusedLibraries
OleRegGetUserType
OleRegEnumVerbs
CoDisconnectObject
StringFromCLSID
CoGetClassObject
WriteClassStm
CreateGenericComposite
CoCreateInstance
CoInitialize
CoUninitialize
FreePropVariantArray
CLSIDFromString
comctl32
ImageList_Destroy
ImageList_GetImageCount
_TrackMouseEvent
ImageList_Create
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetIcon
DestroyPropertySheetPage
CreatePropertySheetPageA
PropertySheetA
ImageList_AddMasked
netapi32
NetServerTransportAddEx
winmm
PlaySoundA
kernel32
DeleteCriticalSection
GetStartupInfoA
GetCommandLineA
GetDateFormatA
GetTimeFormatA
HeapFree
GetLastError
GetSystemTimeAsFileTime
HeapAlloc
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
CreateFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ReadFile
RaiseException
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LoadLibraryA
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
IsValidCodePage
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.time Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ