Static task
static1
Behavioral task
behavioral1
Sample
aa5fed847b177f9e704faec7e694124e993c7f4c390861d619caea12a21db63d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aa5fed847b177f9e704faec7e694124e993c7f4c390861d619caea12a21db63d.exe
Resource
win10v2004-20220812-en
General
-
Target
aa5fed847b177f9e704faec7e694124e993c7f4c390861d619caea12a21db63d
-
Size
354KB
-
MD5
061b515dda8da6111cbc5cf8443fd500
-
SHA1
1b8cd703478ce2176559479f8d76a4e10330b9a2
-
SHA256
aa5fed847b177f9e704faec7e694124e993c7f4c390861d619caea12a21db63d
-
SHA512
2001beee0931d68ffb9201947d4c9f033ea8e2cebc48035e11397a4159f17cdf2a667e513be54a73e23d141dfe8d6075d968d66278881779329a517c7d0fa93b
-
SSDEEP
6144:pAOjC+7Bbif0sSDZrXqcD/kh/3k7SC8QBHlueGT:pdPcf0sSDdXqcgPCSwllzGT
Malware Config
Signatures
Files
-
aa5fed847b177f9e704faec7e694124e993c7f4c390861d619caea12a21db63d.exe windows x86
bb2cad887d7d292be1977946be55aa86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetClassLongW
SetSysColors
GetGuiResources
IsDialogMessageA
OpenWindowStationA
SetDlgItemInt
AppendMenuA
GetKeyboardType
FrameRect
GetClientRect
GetDesktopWindow
AdjustWindowRectEx
AllowSetForegroundWindow
SetDlgItemTextA
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
CreatePopupMenu
GetSystemMetrics
AnimateWindow
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
FillRect
DrawTextA
EndPaint
ShowWindow
GetLastActivePopup
GetMenuItemID
LoadIconA
shell32
DragFinish
Shell_NotifyIconW
ShellExecuteExW
DragQueryPoint
FindExecutableA
DragAcceptFiles
SHGetSpecialFolderLocation
SHFileOperationA
ShellExecuteA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
DoEnvironmentSubstW
ole32
GetHGlobalFromStream
CoCreateInstance
OleGetIconOfFile
OleInitialize
CoTaskMemFree
OleMetafilePictFromIconAndLabel
CoGetObject
OleUninitialize
CoDisconnectObject
advapi32
RegDeleteValueA
BackupEventLogW
RegSaveKeyA
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
AddAuditAccessObjectAce
RegCloseKey
RegCreateKeyExA
SetServiceStatus
RegQueryValueW
GetSecurityDescriptorLength
LookupPrivilegeNameA
gdi32
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
ArcTo
AddFontResourceExW
ColorMatchToTarget
AddFontResourceW
CloseFigure
CreateDCW
CreateDIBPatternBrush
AddFontMemResourceEx
CopyEnhMetaFileA
SetBkColor
opengl32
glRectd
glRasterPos3d
glTexCoord4f
glPushName
glColor3usv
glClearStencil
glLightiv
glLoadIdentity
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStdHandle
GetModuleHandleW
HeapCreate
HeapReAlloc
VirtualFree
HeapFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStartupInfoA
GetSystemTimeAsFileTime
InterlockedDecrement
InterlockedIncrement
HeapAlloc
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
GetCurrentProcessId
GetFileAttributesA
GetLastError
CreateDirectoryA
GetACP
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
HeapSize
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetFileAttributesA
QueryPerformanceCounter
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
SetCurrentDirectoryA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
VirtualAlloc
WritePrivateProfileStructW
LocalCompact
GetSystemDefaultUILanguage
VerLanguageNameA
ScrollConsoleScreenBufferA
BeginUpdateResourceA
VirtualLock
ConvertThreadToFiber
GetWindowsDirectoryA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
SetFilePointer
MulDiv
ReadFile
WriteFile
GetPrivateProfileStringA
WritePrivateProfileStringA
MultiByteToWideChar
lstrcmpA
Sections
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wonderf Size: 169KB - Virtual size: 27.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ