Static task
static1
Behavioral task
behavioral1
Sample
08914a45a7e0af4586ff540fdbdefe20cc8670a5be9884cfdad6e9c5a31f9ec8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
08914a45a7e0af4586ff540fdbdefe20cc8670a5be9884cfdad6e9c5a31f9ec8.exe
Resource
win10v2004-20221111-en
General
-
Target
08914a45a7e0af4586ff540fdbdefe20cc8670a5be9884cfdad6e9c5a31f9ec8
-
Size
340KB
-
MD5
0969add8a322660600f23fbdc7b476a6
-
SHA1
3f43bc985ced1f2cdc32debee66f0d89335035e7
-
SHA256
08914a45a7e0af4586ff540fdbdefe20cc8670a5be9884cfdad6e9c5a31f9ec8
-
SHA512
779a23b14e6b0bf12e9a690ab96123da41ed6891332704eb9f77183cc5024dc488248cb8fcf58a2979e3349a185a85c4b67026ee2c91ee2e52339792fecdbfff
-
SSDEEP
6144:uWNq5994pfQ7RXyut1PumYQ6bbvAyzzNy4aZvAMCQuWhMcDUzo0naGM:7I599htczQgtaZvAMCEMcIPaGM
Malware Config
Signatures
Files
-
08914a45a7e0af4586ff540fdbdefe20cc8670a5be9884cfdad6e9c5a31f9ec8.exe windows x86
e0d84f14d40bdac1845bd107774b41af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetFileAttributesA
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
ExitProcess
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
SetEndOfFile
Sleep
GetTimeZoneInformation
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FlushFileBuffers
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GlobalFlags
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
FreeResource
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
UnmapViewOfFile
GetLocalTime
SystemTimeToFileTime
GetCurrentProcess
DuplicateHandle
CreateFileMappingA
MapViewOfFile
GetFileType
GetFileInformationByHandle
SetFilePointer
FileTimeToDosDateTime
FileTimeToSystemTime
WinExec
SetLastError
GetProcAddress
GetModuleHandleA
DeleteFileA
WriteFile
lstrlenA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
InterlockedExchange
GetLastError
ReadFile
CreateFileA
GetFileSize
CloseHandle
GetNumberFormatA
lstrcpyA
GetLocaleInfoA
MulDiv
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetPrivateProfileStringA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GetACP
SizeofResource
user32
GetCursorPos
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
ClientToScreen
ShowWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
GetTopWindow
GetMessageTime
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetFocus
UpdateWindow
RegisterWindowMessageA
SetWindowLongA
MessageBeep
IsWindow
GetParent
KillTimer
ReleaseDC
DestroyMenu
UnregisterClassA
GetSysColorBrush
WindowFromPoint
GetMessageA
PeekMessageA
TranslateMessage
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
InvalidateRect
InflateRect
GetSystemMetrics
GetSysColor
RedrawWindow
GetClientRect
DrawIcon
FillRect
CopyIcon
DestroyCursor
GetMessagePos
SetCursor
LoadIconA
LoadCursorA
EnableWindow
SendMessageA
SetTimer
ScreenToClient
GetWindowRect
PtInRect
RegisterClassA
gdi32
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectObject
SetMapMode
DeleteObject
DeleteDC
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateSolidBrush
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetStockObject
GetObjectA
CreateFontIndirectA
GetDeviceCaps
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegCloseKey
shell32
ShellExecuteExA
ShellExecuteA
ExtractIconA
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
ws2_32
send
recv
socket
gethostname
getservbyname
inet_addr
gethostbyname
ioctlsocket
closesocket
connect
WSACleanup
WSAStartup
htons
select
__WSAFDIsSet
WSAGetLastError
Sections
.text Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ