Static task
static1
Behavioral task
behavioral1
Sample
a08b3aaa4a8faa04e4ff1afcee097ce33457cb1848f86a1b2249e6a7f138c766.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a08b3aaa4a8faa04e4ff1afcee097ce33457cb1848f86a1b2249e6a7f138c766.exe
Resource
win10v2004-20220812-en
General
-
Target
a08b3aaa4a8faa04e4ff1afcee097ce33457cb1848f86a1b2249e6a7f138c766
-
Size
504KB
-
MD5
9df43bf7177b3d2a42efb36fb8fca6f1
-
SHA1
b32437874a820e05837c65b67d9e2f2660681516
-
SHA256
a08b3aaa4a8faa04e4ff1afcee097ce33457cb1848f86a1b2249e6a7f138c766
-
SHA512
19f6c66a40267555b22caeb992b04feb59874096230a5b918f4ae96d9727d4c97e670da44c1b5aec36fa516699e47693097f6af70bd1358ab7a892c5856a3a81
-
SSDEEP
6144:rZZGfCfKaD0swI9dvqthRsVg64XEmosyFzbLchrl2sVJfeahQHfZkMPvS7ve:rZ8S0uN66WEmosyFTchrl2sV8Hft0ve
Malware Config
Signatures
Files
-
a08b3aaa4a8faa04e4ff1afcee097ce33457cb1848f86a1b2249e6a7f138c766.exe windows x86
8f532bfad7d130a71909195db5abba29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeThread
FormatMessageA
GetUserDefaultLCID
IsBadReadPtr
RaiseException
lstrlenA
MapViewOfFile
CreateDirectoryW
Beep
IsValidLocale
WinExec
CreateMutexA
GetFileAttributesW
DuplicateHandle
FatalAppExitA
GetFullPathNameW
TlsSetValue
GetStringTypeA
OutputDebugStringW
GetLocalTime
WriteConsoleW
OpenMutexA
GetStartupInfoA
RemoveDirectoryA
GetFileAttributesA
GlobalUnlock
GlobalAddAtomA
LoadResource
GetFileSize
FindFirstFileA
GetModuleHandleA
GetConsoleOutputCP
LoadLibraryA
GetSystemInfo
GetVersionExW
WritePrivateProfileStringA
GetModuleHandleW
GetTimeZoneInformation
RtlUnwind
GetLastError
ExpandEnvironmentStringsA
GetTempPathW
GetFileAttributesExA
GetProcAddress
GetFileTime
GetPrivateProfileStringA
GetDriveTypeW
lstrcmpA
FlushFileBuffers
GetProcessVersion
SetLastError
GetTickCount
GetModuleFileNameW
FormatMessageW
GetConsoleCP
GetFileType
LoadLibraryExW
FileTimeToLocalFileTime
FindFirstFileW
GlobalGetAtomNameA
GetLocaleInfoA
FileTimeToDosDateTime
CompareStringW
GetStringTypeExW
EnumSystemLocalesA
GetVolumeInformationA
ConvertDefaultLocale
GetTempFileNameW
SetEndOfFile
SetConsoleCtrlHandler
TerminateProcess
GlobalFindAtomW
FindClose
SetStdHandle
GetPrivateProfileIntA
GlobalDeleteAtom
InterlockedIncrement
CreateProcessW
GlobalFree
MoveFileW
CopyFileW
CreateProcessA
SystemTimeToTzSpecificLocalTime
GetOEMCP
VirtualProtect
WaitForMultipleObjects
TlsGetValue
SetEnvironmentVariableA
ResumeThread
GetStringTypeW
ResetEvent
SizeofResource
HeapDestroy
GetACP
IsDebuggerPresent
CreateEventA
GetThreadLocale
FindResourceW
GetEnvironmentStrings
GetSystemTimeAsFileTime
ReadFile
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcess
EnterCriticalSection
LockFile
CreateFileA
GetModuleFileNameA
DeleteFileA
LoadLibraryW
MultiByteToWideChar
GetVersionExA
WaitForSingleObject
GetCurrentProcessId
GlobalAddAtomW
FindNextFileA
HeapCreate
FindResourceExA
GlobalHandle
MulDiv
GetSystemDirectoryA
SetUnhandledExceptionFilter
GetVersion
UnhandledExceptionFilter
OutputDebugStringA
GetCurrentThreadId
IsValidCodePage
GlobalMemoryStatus
GetConsoleMode
GlobalAlloc
SetEvent
FreeEnvironmentStringsW
GetProcessHeap
WriteConsoleA
GetDateFormatA
GetProfileStringA
GetCPInfo
LCMapStringW
GetTempPathA
VirtualQuery
GetOverlappedResult
LocalReAlloc
GlobalReAlloc
CompareStringA
HeapSize
GetLongPathNameW
WriteFile
lstrcpynW
LeaveCriticalSection
SetProcessShutdownParameters
VirtualFree
HeapReAlloc
FreeResource
lstrcpyW
TlsFree
FreeEnvironmentStringsA
GetFullPathNameA
FindResourceA
InitializeCriticalSection
SetFilePointer
GetShortPathNameA
IsBadWritePtr
UnlockFile
GetDriveTypeA
GetStdHandle
LocalFileTimeToFileTime
LocalAlloc
CreateEventW
GetTimeFormatW
WideCharToMultiByte
HeapFree
MoveFileA
InterlockedExchange
GetCurrentThread
GetLocaleInfoW
GetTimeFormatA
CreateSemaphoreW
OpenProcess
CreateDirectoryA
lstrcmpiA
DeleteCriticalSection
HeapAlloc
FileTimeToSystemTime
VirtualAlloc
SetHandleCount
LocalFree
ExitProcess
GetPrivateProfileIntW
LockResource
LCMapStringA
GetCommandLineA
InterlockedDecrement
GetCurrentDirectoryA
lstrlenW
TlsAlloc
GetShortPathNameW
Sleep
SetThreadPriority
GlobalFindAtomA
CloseHandle
CreateThread
lstrcpynA
CreateFileW
winmm
mixerGetLineControlsA
waveOutSetPlaybackRate
waveInUnprepareHeader
mmioOpenA
mixerSetControlDetails
mixerGetControlDetailsW
mixerClose
mciSendCommandA
waveOutGetDevCapsA
mixerGetNumDevs
waveInStart
mciSendStringA
waveOutClose
waveOutReset
waveInOpen
waveOutPrepareHeader
mixerGetLineInfoA
mixerGetControlDetailsA
waveInPrepareHeader
mixerGetDevCapsA
waveInAddBuffer
mixerGetLineInfoW
mixerGetDevCapsW
mmioClose
waveOutOpen
waveOutWrite
mixerOpen
waveOutGetNumDevs
PlaySoundA
mixerGetLineControlsW
mixerGetID
waveInClose
waveInReset
advapi32
GetSecurityInfo
RegQueryInfoKeyW
RegQueryValueA
RegQueryInfoKeyA
RegOpenKeyExA
GetLengthSid
RegSetValueW
SetSecurityDescriptorGroup
InitializeSecurityDescriptor
RegSetValueA
GetUserNameA
GetFileSecurityA
OpenThreadToken
SetServiceStatus
DuplicateToken
GetAclInformation
RegOpenKeyExW
CloseServiceHandle
RegDeleteKeyW
ChangeServiceConfigA
RegQueryValueExW
GetAce
RegQueryValueW
ControlService
RegCreateKeyExW
RegSetValueExA
RegQueryValueExA
AllocateAndInitializeSid
AdjustTokenPrivileges
InitializeAcl
DeleteService
AddAce
LookupPrivilegeValueA
GetTokenInformation
RegEnumValueW
OpenProcessToken
RegDeleteKeyA
RegCloseKey
OpenSCManagerA
RegEnumKeyA
CopySid
AccessCheck
RegOpenCurrentUser
MapGenericMask
GetFileSecurityW
CreateServiceW
SetSecurityDescriptorOwner
SetFileSecurityA
RegCreateKeyExA
LookupAccountNameW
ImpersonateSelf
DeregisterEventSource
RegCreateKeyA
RegDeleteValueW
RegEnumKeyExW
EqualSid
RegOpenKeyA
CreateServiceA
RegDeleteValueA
OpenServiceA
RegEnumKeyExA
SetSecurityDescriptorDacl
winspool.drv
SetPrinterDataW
FindNextPrinterChangeNotification
SetJobW
DocumentPropertiesA
FindFirstPrinterChangeNotification
OpenPrinterW
OpenPrinterA
DocumentPropertiesW
EnumPrintersW
ClosePrinter
GetJobW
ord204
FreePrinterNotifyInfo
GetJobA
EnumPortsW
comctl32
ImageList_BeginDrag
CreatePropertySheetPageA
ImageList_LoadImageA
FlatSB_EnableScrollBar
ImageList_GetIcon
InitializeFlatSB
DestroyPropertySheetPage
ord17
ImageList_AddMasked
ImageList_SetOverlayImage
ImageList_GetImageCount
ImageList_Destroy
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DrawEx
ImageList_DragLeave
ImageList_Create
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_Remove
ImageList_GetImageInfo
ImageList_Read
ImageList_Draw
PropertySheetA
ImageList_SetBkColor
CreateToolbarEx
ImageList_Write
ImageList_GetBkColor
ImageList_SetImageCount
ImageList_GetIconSize
ImageList_Add
ImageList_SetDragCursorImage
user32
DrawTextExA
SetRectEmpty
ValidateRect
EndPaint
ClientToScreen
DefWindowProcW
ScreenToClient
GetDCEx
GetMessageTime
UnionRect
IsChild
SendDlgItemMessageW
SetRect
SetTimer
GetPropW
ExcludeUpdateRgn
RemovePropA
GetNextDlgTabItem
GetClipboardOwner
DrawTextA
GrayStringA
SetDlgItemInt
EnableScrollBar
DefDlgProcA
CharUpperW
GetKeyState
PostMessageW
DdeFreeStringHandle
ToAsciiEx
DestroyWindow
CharNextA
EndDeferWindowPos
LoadStringA
SetFocus
PeekMessageA
LoadMenuW
SetScrollInfo
IntersectRect
DispatchMessageW
LoadIconA
GetClipboardFormatNameA
wsprintfA
LockWindowUpdate
BeginPaint
GetMenuCheckMarkDimensions
RegisterClassA
SetScrollRange
GetWindowRect
SetWindowTextA
GetLastActivePopup
RedrawWindow
CheckMenuItem
GetSysColor
LoadImageA
SetWindowContextHelpId
GetClassLongA
LoadAcceleratorsW
GetSystemMetrics
CopyIcon
GetTopWindow
CreateDialogIndirectParamA
GetActiveWindow
TranslateAcceleratorW
CreateWindowExA
WinHelpA
DestroyCursor
GetClassLongW
UnregisterClassA
GetWindowLongW
CreateAcceleratorTableA
ReuseDDElParam
TranslateMessage
CheckRadioButton
DrawFrameControl
SetMenu
GetCursorPos
SendMessageA
GetMenuItemCount
GetDlgCtrlID
CreateMenu
GetClassNameW
DestroyAcceleratorTable
MoveWindow
AppendMenuA
CheckMenuRadioItem
GetWindowLongA
DefFrameProcW
GetMenuItemID
CheckDlgButton
EnumWindows
GetAsyncKeyState
PostMessageA
GetWindow
RegisterWindowMessageA
EmptyClipboard
LoadBitmapW
SetWindowLongA
IsDlgButtonChecked
DestroyIcon
GetScrollRange
InsertMenuA
IsWindow
DestroyMenu
EnumDisplaySettingsA
SetMenuItemInfoW
GetMenu
SetWindowTextW
FillRect
IsWindowEnabled
CreateIconFromResourceEx
BeginDeferWindowPos
TrackPopupMenu
SetForegroundWindow
SetCapture
SendDlgItemMessageA
GetWindowTextLengthW
OemToCharBuffA
IsZoomed
RemovePropW
PostQuitMessage
IsDialogMessageA
SetClipboardViewer
SetMenuItemBitmaps
SetDlgItemTextA
GetClientRect
GetDesktopWindow
CreateWindowExW
SetActiveWindow
GetWindowTextLengthA
UpdateWindow
IsClipboardFormatAvailable
InvalidateRgn
IsWindowUnicode
GetMenuState
SetDlgItemTextW
GetDC
ScrollWindow
SetPropA
GetWindowPlacement
GetFocus
GetMenuStringW
EnableWindow
GetDlgItem
IsRectEmpty
CopyRect
DeleteMenu
ReleaseCapture
SetClipboardData
GetWindowDC
DrawEdge
CallNextHookEx
GetClassNameA
OffsetRect
RegisterHotKey
SendMessageW
TranslateAcceleratorA
CreateCaret
GetPropA
LoadCursorW
GetWindowTextW
SetMenuDefaultItem
GetKeyboardState
GetMessageW
WaitMessage
DeferWindowPos
DrawIconEx
LoadCursorA
ShowOwnedPopups
MapDialogRect
GetMenuItemInfoW
LoadBitmapA
MessageBeep
PtInRect
wsprintfW
FlashWindow
GetMessageA
DispatchMessageA
AdjustWindowRectEx
SystemParametersInfoA
GetWindowThreadProcessId
GetDlgItemTextA
PeekMessageW
GetWindowTextA
SetWindowLongW
CloseClipboard
SetParent
BringWindowToTop
DialogBoxParamW
HideCaret
MessageBoxW
CreateAcceleratorTableW
UnregisterClassW
MonitorFromPoint
DefWindowProcA
ScrollWindowEx
CreatePopupMenu
GetMessagePos
UnpackDDElParam
CallWindowProcW
LoadAcceleratorsA
CopyImage
RegisterClassExA
EndDialog
OpenClipboard
ReleaseDC
GetScrollPos
GetParent
PostThreadMessageA
IsIconic
KillTimer
InvalidateRect
GetSystemMenu
DrawStateA
EnableMenuItem
GetClassInfoExA
ShowScrollBar
GetSubMenu
GetClassInfoA
GetSysColorBrush
SetWindowRgn
DrawFocusRect
CopyAcceleratorTableA
RegisterClipboardFormatA
GetMenuStringA
CallWindowProcA
FrameRect
FindWindowA
GetForegroundWindow
DrawTextExW
GetCapture
WinHelpW
InflateRect
SetWindowsHookExW
CharUpperA
ModifyMenuW
IsDialogMessageW
CreateDialogIndirectParamW
UnhookWindowsHookEx
ShowWindow
CreateIconIndirect
MessageBoxA
SetWindowPos
LoadMenuA
MapWindowPoints
oleaut32
LoadTypeLi
shell32
SHFileOperationA
DragQueryFileA
ExtractIconA
SHBrowseForFolderW
SHBrowseForFolderA
FindExecutableA
SHGetFolderPathW
SHGetMalloc
DragAcceptFiles
SHGetPathFromIDListA
ExtractIconW
ShellExecuteA
DragFinish
SHGetPathFromIDListW
Shell_NotifyIconW
SHAppBarMessage
SHGetSpecialFolderLocation
SHChangeNotify
ord155
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ