Static task
static1
Behavioral task
behavioral1
Sample
2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c.exe
Resource
win7-20220812-en
General
-
Target
2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c
-
Size
829KB
-
MD5
0d0581a460a3cf637fe8c23c7d37d186
-
SHA1
6e179f50aebff9e263f25778f3dbeac84c7bcc58
-
SHA256
2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c
-
SHA512
3f58f1464b6f77af100292d364e52f744e47c1b4d6a747300f07ad474ffc2a6ca2a5bd1268e04d13efe9aea2014e939a690adefa41442ed8e3d5236ab402902b
-
SSDEEP
24576:o4bzLIHR5Oug2Z3MpcupcuIc/iEcJ/7sF:hL5oOLcuB/QRsF
Malware Config
Signatures
Files
-
2a817b41fcb5a4794bf4ba9b9c5be586614d349470e46797435ef15be8a2195c.exe windows x86
5462789295d092eb986fd1dc50709890
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetFontUnicodeRanges
GetTextCharsetInfo
GetDCBrushColor
GetFontLanguageInfo
SetTextCharacterExtra
GetNearestColor
GetBkColor
GetCurrentObject
GetTextColor
GetRandomRgn
GetTextAlign
SetTextJustification
GetTextCharacterExtra
SetSystemPaletteUse
kernel32
IsProcessorFeaturePresent
GlobalFlags
GetFileTime
CloseHandle
GetProcAddress
GetProcessId
DeleteFileA
QueryPerformanceCounter
LocalFlags
GetCurrentProcessId
MoveFileA
GetDriveTypeA
SizeofResource
LoadResource
LockResource
GetLastError
WriteFile
GetStdHandle
GetCurrentThreadId
GetVersion
GetCurrentProcess
GlobalSize
IsDebuggerPresent
GlobalAlloc
GetModuleHandleA
GetTickCount
GetProcessHeap
CreateThread
LocalAlloc
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
CreateFileA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FreeLibrary
GetFileType
SetHandleCount
GetFileAttributesA
GetCurrentDirectoryA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
GetModuleHandleW
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
GetTimeZoneInformation
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
VirtualFree
VirtualAlloc
HeapCreate
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
GetFullPathNameA
user32
SetDlgItemTextA
MoveWindow
GetDlgItemInt
GetWindowContextHelpId
BeginPaint
LoadIconA
GetWindowLongA
GetQueueStatus
GetMenuItemID
GetMenuItemCount
SendMessageA
GetKeyboardType
EndPaint
GetPropA
GetDialogBaseUnits
IsWindowUnicode
CallWindowProcA
GetForegroundWindow
GetDlgItem
DrawTextA
GetMenuCheckMarkDimensions
GetWindowDC
WindowFromDC
SetWindowTextA
PostMessageA
EndDialog
GetInputState
GetMenuContextHelpId
EnableWindow
RemovePropA
GetDC
CheckDlgButton
ShowWindow
GetScrollPos
IsWindowEnabled
GetCursor
Sections
.text Size: 652KB - Virtual size: 651KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 123KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE