Static task
static1
Behavioral task
behavioral1
Sample
f512adf0abfa86ce39d355b5c5f44be91d88012e9c3d6c2541d22c902eab4576.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f512adf0abfa86ce39d355b5c5f44be91d88012e9c3d6c2541d22c902eab4576.exe
Resource
win10v2004-20220901-en
General
-
Target
f512adf0abfa86ce39d355b5c5f44be91d88012e9c3d6c2541d22c902eab4576
-
Size
104KB
-
MD5
b01977930e0a2f2ba59a0a0d67302316
-
SHA1
99f88d4ba05cbf019d5a4ac7d3089a79c337e659
-
SHA256
f512adf0abfa86ce39d355b5c5f44be91d88012e9c3d6c2541d22c902eab4576
-
SHA512
e3d0b0bda7aff0e373ff4a36be5e4a21209965184f9e668f275ad307d7f8fea3f785006a2bbd4b1d721f6b04b8d6e4c38f989e9fcc32cabc00d8f6f97ba69766
-
SSDEEP
1536:ufcMSoX8Vo1HHG5s9ft3rv5fM2XGcB2mlwctnwBWb36vA1W4gUTLEMbWf:ufcMJiIfxDBf++3GAjTLEMKf
Malware Config
Signatures
Files
-
f512adf0abfa86ce39d355b5c5f44be91d88012e9c3d6c2541d22c902eab4576.exe windows x86
a648574a7b3041a0eeae7ab1f0c6d387
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
SetEndOfFile
CreateFileW
HeapReAlloc
HeapSize
FlushFileBuffers
GetStringTypeW
CreateFileA
SetFilePointer
WriteConsoleW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryW
DeleteCriticalSection
OutputDebugStringA
GetProcessHeap
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
RtlUnwind
EncodePointer
GetModuleFileNameW
GetStdHandle
HeapCreate
IsProcessorFeaturePresent
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteFile
GetFileType
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
QueryPerformanceFrequency
GetCurrentDirectoryA
GetModuleFileNameA
WritePrivateProfileStringA
CreateFileMappingA
GetPrivateProfileStringA
GetLastError
SetCurrentDirectoryA
MultiByteToWideChar
MulDiv
GetConsoleWindow
CloseHandle
Sleep
EnterCriticalSection
SetStdHandle
HeapFree
LCMapStringW
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
ReadFile
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
ExitProcess
GetModuleHandleW
GetProcAddress
DeleteFileA
TlsAlloc
lstrlenA
user32
CopyRect
MoveWindow
LoadCursorA
DestroyMenu
CallWindowProcA
GetDlgCtrlID
RegisterClassA
SetClipboardData
SetWindowTextA
EndPaint
ClientToScreen
DestroyWindow
GetDlgItemInt
GetSystemMenu
GetWindowRect
SetActiveWindow
PostQuitMessage
SendDlgItemMessageA
TrackPopupMenu
FillRect
DeleteMenu
OffsetRect
wsprintfA
GetClientRect
SetFocus
SendMessageA
BeginPaint
WinHelpA
DrawFocusRect
InflateRect
IsWindowEnabled
SetWindowLongA
GetScrollInfo
MessageBoxA
InvalidateRect
GetWindowLongA
IsWindowUnicode
GetDlgItem
DefWindowProcA
GetDesktopWindow
GetSysColor
SetWindowPos
CheckDlgButton
ShowWindow
CreatePopupMenu
GetSysColorBrush
FrameRect
DrawMenuBar
AppendMenuA
IsWindow
PostMessageA
ScrollWindowEx
GetSystemMetrics
IsWindowVisible
gdi32
CreateFontIndirectA
SetBkColor
SetBkMode
DeleteObject
SelectObject
SetMapMode
SaveDC
GetTextExtentPointW
GetTextMetricsA
GetStockObject
ExtTextOutA
RestoreDC
TextOutA
SetTextColor
winspool.drv
EnumPrintersA
comdlg32
ChooseFontA
GetOpenFileNameA
shell32
Shell_NotifyIconW
SHGetSpecialFolderLocation
ole32
CoCreateInstance
CLSIDFromString
CoInitialize
CLSIDFromProgID
CoUninitialize
oleaut32
SysFreeString
SafeArrayUnlock
VariantInit
SafeArrayPtrOfIndex
SafeArrayLock
SysAllocStringLen
SysAllocString
SafeArrayGetRecordInfo
odbc32
ord7
ord9
ord75
ord24
ord31
ord39
shlwapi
StrRChrA
comctl32
GetMUILanguage
uxtheme
IsAppThemed
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ