Static task
static1
Behavioral task
behavioral1
Sample
a0bd330ab9b54c8eb39d31b0863eb6db3db9280b8ef68a17c770a0c94db6f5e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0bd330ab9b54c8eb39d31b0863eb6db3db9280b8ef68a17c770a0c94db6f5e7.exe
Resource
win10v2004-20220812-en
General
-
Target
a0bd330ab9b54c8eb39d31b0863eb6db3db9280b8ef68a17c770a0c94db6f5e7
-
Size
7.3MB
-
MD5
0ef3605f596160cbc6a2acd52319fc3a
-
SHA1
c990f3010967cfb466828c00caf845bfed5da268
-
SHA256
a0bd330ab9b54c8eb39d31b0863eb6db3db9280b8ef68a17c770a0c94db6f5e7
-
SHA512
00cbd5649d0d35dd123f979a19ed164ae3d0863f9d6b82a8bc146f0d2bdaea681d9cfe6dc5971cb20ab6cbd640177bfe83473a137d286dd8083bdce12adc3c43
-
SSDEEP
98304:vrtortUrtLrt/rtGrtrrtprtortUrtLrt/rtGrt:RsQ1BCVjsQ1BC
Malware Config
Signatures
Files
-
a0bd330ab9b54c8eb39d31b0863eb6db3db9280b8ef68a17c770a0c94db6f5e7.exe windows x86
0d39507d96980a48a6c8700d34b5bdfc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetProcAddress
LoadLibraryExW
ExitProcess
OpenEventA
WaitForSingleObject
WinExec
VirtualAllocEx
SleepEx
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CreateFileA
GetCurrencyFormatA
ReadConsoleInputExW
VerLanguageNameA
lstrcatA
LZOpenFileW
SetConsoleFont
IsBadStringPtrA
FindActCtxSectionGuid
ResumeThread
WriteConsoleInputVDMW
CopyFileA
LocalUnlock
GetTapeStatus
CreateSemaphoreA
GlobalSize
CreateNamedPipeW
GetShortPathNameW
HeapCreate
EnumerateLocalComputerNamesA
lstrcpynW
PeekConsoleInputA
GetNumberOfConsoleFonts
DeleteAtom
GetNumberOfConsoleInputEvents
AssignProcessToJobObject
EnumCalendarInfoA
LZCreateFileW
DefineDosDeviceW
CompareFileTime
GetConsoleInputExeNameA
GetPrivateProfileSectionNamesA
PrivCopyFileExW
InterlockedExchangeAdd
GetConsoleCommandHistoryLengthA
EnumResourceNamesA
VerLanguageNameW
ReadConsoleInputW
LocalHandle
GetModuleFileNameW
FindFirstFileW
FindFirstChangeNotificationA
WTSGetActiveConsoleSessionId
GetFileInformationByHandle
LocalShrink
SignalObjectAndWait
lstrcpynA
IsDebuggerPresent
UnregisterConsoleIME
GetEnvironmentStringsA
QueryPerformanceFrequency
CreateJobObjectA
GetFullPathNameA
DeleteFileW
GetCommConfig
OpenWaitableTimerA
GetCurrentDirectoryW
GetTempPathA
GetSystemWindowsDirectoryA
FindFirstVolumeW
WriteConsoleA
SetConsoleDisplayMode
LoadLibraryW
GetVDMCurrentDirectories
SetConsoleInputExeNameW
MulDiv
GetTempPathW
lstrlenA
CreateRemoteThread
SearchPathA
CreateWaitableTimerA
GlobalHandle
GetUserDefaultLangID
GetNumberOfConsoleMouseButtons
LZOpenFileA
SetThreadPriorityBoost
CreateIoCompletionPort
EnumTimeFormatsA
MoveFileExA
EnumDateFormatsW
GetExpandedNameW
WritePrivateProfileStringW
CreateActCtxA
AddRefActCtx
BuildCommDCBW
GetModuleHandleExW
SetFirmwareEnvironmentVariableA
FindNextVolumeMountPointA
SetProcessPriorityBoost
IsSystemResumeAutomatic
SetTermsrvAppInstallMode
VirtualAlloc
Process32FirstW
EnumCalendarInfoExW
GetStringTypeW
SetLocaleInfoA
CancelDeviceWakeupRequest
CreateMemoryResourceNotification
GetVolumePathNameA
UTRegister
ReadConsoleInputA
SetLocalPrimaryComputerNameW
GetLocalTime
GetProcessShutdownParameters
UTUnRegister
GetTempFileNameA
LZDone
SetEnvironmentVariableA
GetDllDirectoryA
RegisterWowBaseHandlers
ScrollConsoleScreenBufferA
GlobalMemoryStatusEx
SetTimeZoneInformation
WritePrivateProfileStructA
GetSystemDirectoryW
EnumSystemLanguageGroupsA
WaitForDebugEvent
FindNextVolumeA
GlobalDeleteAtom
EnumSystemLocalesA
ProcessIdToSessionId
CreateEventA
GetConsoleCharType
SetThreadExecutionState
GetUserGeoID
GetCurrentProcessId
GetConsoleHardwareState
LZCloseFile
TlsSetValue
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE