Static task
static1
Behavioral task
behavioral1
Sample
f43100ecea19e963c2ff0e8f8cdf7a3a9a21a7ae0c016d2e75df1b2c59e995d6.exe
Resource
win7-20220812-en
General
-
Target
f43100ecea19e963c2ff0e8f8cdf7a3a9a21a7ae0c016d2e75df1b2c59e995d6
-
Size
229KB
-
MD5
09e5de210d970cf7de540892f735aed0
-
SHA1
40cd94d7581aa04c1e1faa5736e189cb20b2cef8
-
SHA256
f43100ecea19e963c2ff0e8f8cdf7a3a9a21a7ae0c016d2e75df1b2c59e995d6
-
SHA512
0fbb3033a5b1948699ac112dc6e1370c22602d47f2bca1a2a3a7b9a435febb08269b9717910f581afa370764370c99ea2489e61e16bd4a33b11db74f9aae33a8
-
SSDEEP
3072:ZEG3owIwFxgw2FUf4y1kV+qWr452CC1ccW/ge8NMIGCuhB3qk:KGYwIwFxgw2uZC+XrzDVRNpuC
Malware Config
Signatures
Files
-
f43100ecea19e963c2ff0e8f8cdf7a3a9a21a7ae0c016d2e75df1b2c59e995d6.exe windows x86
afe4ce1190819ad9dcb709f3850703ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
CreateProcessA
WaitForMultipleObjects
ResetEvent
CloseHandle
TerminateThread
CreateEventA
SetEvent
FreeLibrary
GetProcAddress
LoadLibraryA
RaiseException
FindResourceA
SizeofResource
LockResource
LoadResource
FindResourceExA
WideCharToMultiByte
GetPrivateProfileStringA
GetCurrentThreadId
SetLastError
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
lstrlenA
MultiByteToWideChar
lstrlenW
GetLastError
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
GetLocaleInfoA
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
EnterCriticalSection
GetModuleFileNameA
CreateDirectoryA
lstrcpyA
lstrcatA
FindFirstFileA
FindNextFileA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetStdHandle
LCMapStringW
LCMapStringA
ReadFile
SetEndOfFile
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
LeaveCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
ExitThread
CreateThread
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
GetModuleHandleW
GetSystemInfo
VirtualQuery
GetCommandLineA
GetStartupInfoA
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
user32
CharNextA
SetWindowLongA
IsDialogMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
CreateDialogParamA
DefWindowProcA
UnregisterClassA
GetWindow
GetWindowRect
GetWindowLongA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
ShowWindow
PostQuitMessage
GetSystemMetrics
LoadImageA
SendMessageA
SetFocus
PostMessageA
IsWindow
SetForegroundWindow
MessageBoxA
GetParent
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
shell32
SHFileOperationA
ShellExecuteA
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VarUI4FromStr
shlwapi
PathFileExistsA
comctl32
InitCommonControlsEx
Sections
.text Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE