Static task
static1
Behavioral task
behavioral1
Sample
0a4498f940d8cebb9abd8787b006e2aef71a9f3ac68e41d7ff6a5d208d41a6b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a4498f940d8cebb9abd8787b006e2aef71a9f3ac68e41d7ff6a5d208d41a6b3.exe
Resource
win10v2004-20220812-en
General
-
Target
0a4498f940d8cebb9abd8787b006e2aef71a9f3ac68e41d7ff6a5d208d41a6b3
-
Size
277KB
-
MD5
174e5d1d625e13cd22bf3a1ab8581000
-
SHA1
8384d37577be90e1c7c49ebeeaece450c7413b89
-
SHA256
0a4498f940d8cebb9abd8787b006e2aef71a9f3ac68e41d7ff6a5d208d41a6b3
-
SHA512
6b3f069a30dbf9bc9a0322b2c6b47430ca7b729032ec9d5a2fa9917d9c56e69ca1a429221bbb56a060167daded0925bc3017d63984640709868a40125e997b81
-
SSDEEP
6144:f4lg7QOO4dkVklvP86WW3/jsvcbZ6XWAIz14Qf9sMPcg:fQyQgK08hW3r+W4Szy2bPcg
Malware Config
Signatures
Files
-
0a4498f940d8cebb9abd8787b006e2aef71a9f3ac68e41d7ff6a5d208d41a6b3.exe windows x86
0d12219e1db232fa6a09162285138b61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc80
ord764
ord310
ord2322
ord578
ord265
ord266
ord762
msvcr80
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
towupper
sprintf
_access
strncpy
fopen
fseek
fgetpos
fread
fclose
memset
_splitpath
_onexit
_vsnprintf
_vsnwprintf
_vswprintf
malloc
free
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
memmove_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_makepath
_controlfp_s
kernel32
LeaveCriticalSection
ReadFile
WriteFile
EnterCriticalSection
OutputDebugStringW
OutputDebugStringA
CreateMutexA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
GetVersionExW
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
WinExec
LocalFree
GetCommandLineW
GetFileAttributesW
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WideCharToMultiByte
GetLastError
InitializeCriticalSection
GetVersionExA
DeleteCriticalSection
CloseHandle
WaitNamedPipeW
Sleep
UnmapViewOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
user32
FindWindowW
ShowWindow
SetForegroundWindow
wsprintfA
advapi32
RegQueryValueExW
RegOpenKeyExW
SetNamedSecurityInfoA
GetUserNameW
RegCloseKey
shell32
CommandLineToArgvW
msvcp80
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE