Static task
static1
Behavioral task
behavioral1
Sample
a1877f2508d9b2561fba2709cf7d1569d189275b016cb2ba095b8fb5cb1738dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1877f2508d9b2561fba2709cf7d1569d189275b016cb2ba095b8fb5cb1738dd.exe
Resource
win10v2004-20220812-en
General
-
Target
a1877f2508d9b2561fba2709cf7d1569d189275b016cb2ba095b8fb5cb1738dd
-
Size
305KB
-
MD5
08a556c30e916cbd675f6d15b14ef0cc
-
SHA1
70e6c5053de73afc442bb68fc5bd5a12e8231415
-
SHA256
a1877f2508d9b2561fba2709cf7d1569d189275b016cb2ba095b8fb5cb1738dd
-
SHA512
a38a43a0d7851e37e07f38bb15f15406131de44b3b1403f444745b68bae1c2ba0a05439544340f9b4605bb7f0be58de10f57d6060e3a395bb918be9d3a4ce081
-
SSDEEP
6144:B3JgQrjBXxWNfXoQVPEqAIRnSXhgfJ06Qcj9:ztBXc1tPElkOOR9
Malware Config
Signatures
Files
-
a1877f2508d9b2561fba2709cf7d1569d189275b016cb2ba095b8fb5cb1738dd.exe windows x86
efa51b443ebbdfa11a9996bdaea31adb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BackupWrite
ChangeTimerQueueTimer
ClearCommBreak
CloseHandle
CommConfigDialogW
CompareStringW
ContinueDebugEvent
ConvertDefaultLocale
CopyFileA
CreateConsoleScreenBuffer
CreateDirectoryExW
CreateFileW
CreateJobObjectA
CreateNamedPipeA
CreateProcessA
DebugActiveProcess
DefineDosDeviceA
DeleteFileW
EnumLanguageGroupLocalesA
EnumResourceLanguagesW
EnumTimeFormatsA
ExitProcess
FileTimeToDosDateTime
FileTimeToSystemTime
FindFirstVolumeMountPointW
FormatMessageW
FreeLibrary
GetBinaryTypeA
GetCommMask
GetCommModemStatus
GetCommandLineW
GetComputerNameW
GetConsoleAliasA
GetConsoleDisplayMode
GetConsoleTitleA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceW
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesExA
GetFullPathNameA
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberFormatA
GetNumberOfConsoleMouseButtons
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetProcAddress
GetProcessTimes
GetProfileSectionW
GetStartupInfoA
GetSystemDefaultLCID
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetThreadPriorityBoost
GetTickCount
GetUserDefaultLangID
AreFileApisANSI
GetWindowsDirectoryW
GlobalAddAtomA
GlobalAddAtomW
GlobalFix
GlobalFree
GlobalReAlloc
GlobalUnWire
HeapFree
HeapValidate
InterlockedDecrement
InterlockedIncrement
IsBadWritePtr
LoadLibraryW
LoadModule
LocalAlloc
LocalFree
OpenFile
OpenMutexA
OpenMutexW
OpenProcess
Process32NextW
QueryPerformanceCounter
ReadFile
ReadFileScatter
ReleaseMutex
RtlMoveMemory
RtlZeroMemory
SetCalendarInfoW
SetCommTimeouts
SetComputerNameW
SetConsoleActiveScreenBuffer
SetFileAttributesW
SetLastError
SetPriorityClass
SetProcessPriorityBoost
SetUnhandledExceptionFilter
SetVolumeLabelA
Sleep
SleepEx
SystemTimeToFileTime
TerminateProcess
TlsGetValue
TransmitCommChar
UnhandledExceptionFilter
UnlockFileEx
UnmapViewOfFile
UpdateResourceA
VerifyVersionInfoA
VirtualProtect
VirtualProtectEx
WaitForMultipleObjectsEx
WideCharToMultiByte
WriteConsoleInputA
WriteFile
WritePrivateProfileSectionA
WritePrivateProfileSectionW
_lread
lstrcat
lstrcatA
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenA
VirtualAlloc
GetSystemInfo
GetVolumeNameForVolumeMountPointW
AddAtomW
user32
ChangeDisplaySettingsW
CloseWindow
CopyIcon
CreateMDIWindowW
DdeAbandonTransaction
DdeClientTransaction
DdeCmpStringHandles
DdeDisconnectList
DdeSetUserHandle
DialogBoxParamA
DrawFocusRect
EnumPropsW
FindWindowW
GetClipCursor
GetClipboardSequenceNumber
GetDlgItemTextA
GetFocus
GetKeyboardState
GetListBoxInfo
GetScrollInfo
GetWindowTextLengthW
IsCharAlphaW
IsRectEmpty
MsgWaitForMultipleObjects
OpenWindowStationW
SetSystemCursor
TrackMouseEvent
TranslateMDISysAccel
VkKeyScanA
keybd_event
RegisterClassExA
LoadCursorA
LoadIconA
CallNextHookEx
AllowSetForegroundWindow
advapi32
RegOpenKeyA
msvcrt
memset
Sections
.text Size: 269KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ