Static task
static1
Behavioral task
behavioral1
Sample
a7bc402332c3ba5c1215e97228f0db4358e0a2da5c10b2efcb5b7ee861a9ab3c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a7bc402332c3ba5c1215e97228f0db4358e0a2da5c10b2efcb5b7ee861a9ab3c.exe
Resource
win10v2004-20220901-en
General
-
Target
a7bc402332c3ba5c1215e97228f0db4358e0a2da5c10b2efcb5b7ee861a9ab3c
-
Size
645KB
-
MD5
1436f18d533a9085f26792488798d6ea
-
SHA1
a951bcdbf89c2264676ded7090c1fdf6f1fb0c2c
-
SHA256
a7bc402332c3ba5c1215e97228f0db4358e0a2da5c10b2efcb5b7ee861a9ab3c
-
SHA512
2a1db8fc2e39158fa062e600e2edb52bcd54ad7118bda96eda742e9b7e7915e4876406b7356b844b359dde869a54b9551133b2dc566247519f1fd542ab11a289
-
SSDEEP
12288:OcBBbrz6JTMFKciq4ILLgfVbP18YSSRgrRdD6fzO2BnR5nQr5dV17qi5Y34uwSgC:jbreJTMFKFIPkVbP1ReVdDujBRyFLt/z
Malware Config
Signatures
Files
-
a7bc402332c3ba5c1215e97228f0db4358e0a2da5c10b2efcb5b7ee861a9ab3c.exe windows x86
ea4fbaac04975a0be719212db3b05191
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
RaiseException
GetVersionExW
GetProcAddress
LoadResource
GetTempPathW
MultiByteToWideChar
GetEnvironmentStringsW
HeapCreate
GetStringTypeA
GlobalSize
SizeofResource
LocalLock
lstrcmpiW
GetModuleFileNameA
FindResourceW
SetFilePointer
GetTimeFormatA
GetStringTypeW
GetEnvironmentStrings
HeapAlloc
LoadLibraryW
FileTimeToSystemTime
GlobalLock
ExitProcess
IsValidCodePage
GetSystemInfo
FindClose
VirtualAllocEx
LoadLibraryA
lstrcmpW
GetLocaleInfoA
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
IsBadWritePtr
VirtualAlloc
FlushFileBuffers
SetStdHandle
VirtualFree
HeapDestroy
SetHandleCount
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
CloseHandle
HeapFree
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetStartupInfoA
GlobalFree
InitializeCriticalSection
WriteFile
HeapReAlloc
CreatePipe
LockResource
MulDiv
GetTickCount
GetACP
DeleteFileW
GetFileType
GetConsoleOutputCP
OpenEventW
LocalAlloc
SetFileAttributesW
GetDateFormatA
TerminateThread
VirtualProtect
GetCurrentProcessId
GetLongPathNameW
LCMapStringA
GetModuleHandleW
GetModuleHandleA
ResumeThread
FindNextFileW
CompareStringW
SetEvent
ReadFile
lstrcpynW
IsValidLocale
GetLastError
GetVersionExA
user32
MessageBeep
SetWindowPos
GetMenuStringW
GetCapture
ReleaseDC
ShowWindow
IsDialogMessageW
SetDlgItemInt
DestroyCursor
SetScrollPos
ClientToScreen
DrawFocusRect
DeleteMenu
GetClassNameW
MessageBoxW
PostMessageW
ShowScrollBar
SetWindowTextW
CreateMenu
IsChild
IsClipboardFormatAvailable
GetDC
LoadImageW
CharLowerW
SetWindowPlacement
DialogBoxIndirectParamW
InvalidateRect
GetCursorPos
DestroyWindow
WindowFromPoint
GetMenu
AppendMenuW
MapWindowPoints
EndPaint
GetSubMenu
IsZoomed
CharUpperW
DispatchMessageW
SetCapture
PtInRect
HideCaret
DrawFrameControl
TrackPopupMenu
TranslateAcceleratorW
CallWindowProcW
IsWindowUnicode
RedrawWindow
SetScrollInfo
EmptyClipboard
CreateDialogIndirectParamW
DeferWindowPos
RegisterClassW
IsDialogMessageA
wsprintfW
EnableWindow
CreateCursor
ReleaseCapture
CreateCaret
LoadIconW
ScreenToClient
IsWindow
CreateWindowExW
GetMessageW
GetMenuState
CheckMenuItem
DrawMenuBar
LoadStringW
DestroyCaret
GetMenuItemID
RegisterWindowMessageW
GetWindowTextW
SendDlgItemMessageW
LoadBitmapW
gdi32
GetTextExtentPointW
StartDocW
GetObjectW
CreateCompatibleDC
SetTextAlign
MoveToEx
GetTextExtentPoint32W
BitBlt
CreateCompatibleBitmap
LineTo
GetPixel
CreatePen
CreateFontIndirectW
RemoveFontResourceW
SetBrushOrgEx
SaveDC
StartPage
CreateSolidBrush
CreateHatchBrush
RestoreDC
CreatePatternBrush
ExtTextOutW
EnumFontFamiliesExW
SetWindowOrgEx
SetBkMode
EndDoc
DeleteDC
SetBkColor
CreateFontW
SelectObject
CreateBitmap
comdlg32
ChooseColorW
PrintDlgW
GetSaveFileNameW
ChooseColorA
ChooseFontA
PrintDlgA
PageSetupDlgW
FindTextA
GetFileTitleW
ChooseFontW
PageSetupDlgA
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetFileTitleA
FindTextW
ReplaceTextA
ReplaceTextW
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 603KB - Virtual size: 815KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ