Static task
static1
Behavioral task
behavioral1
Sample
0ac059436b0a3d9f90dbddfefc12ae7f39d96895c25fe99816940cb078e38693.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ac059436b0a3d9f90dbddfefc12ae7f39d96895c25fe99816940cb078e38693.exe
Resource
win10v2004-20220812-en
General
-
Target
0ac059436b0a3d9f90dbddfefc12ae7f39d96895c25fe99816940cb078e38693
-
Size
1.7MB
-
MD5
80d3e387a8c323fc9cc1280fde3c0f80
-
SHA1
a3693d0c0dbc6a4f39032094367e1d7b377ae474
-
SHA256
0ac059436b0a3d9f90dbddfefc12ae7f39d96895c25fe99816940cb078e38693
-
SHA512
a58f9d90de1870ba3bbd54b49727fb6f4859df1b29c726add0e167ef43bb1b12d21edbf11115847fa7ed38cd53a05d1022e309195db1090e002eebf075a069a2
-
SSDEEP
49152:HfrqnZpFlWcskhFQMm9NoXxdm0QoE7zDdae7lEOSI:HfrgEFWKs20JW
Malware Config
Signatures
Files
-
0ac059436b0a3d9f90dbddfefc12ae7f39d96895c25fe99816940cb078e38693.exe windows x86
c79995f0c7080e2c07e069d44d56bdd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
ReadFile
SetFilePointer
TlsFree
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
SizeofResource
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
SetStdHandle
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
RemoveDirectoryA
GlobalLock
DuplicateHandle
CreateFileMappingA
ResetEvent
CompareStringA
FindNextFileW
CompareStringW
GetProcessHeap
GetProcAddress
SetEvent
GetWindowsDirectoryA
GetModuleHandleW
CreateDirectoryA
LCMapStringW
GetStartupInfoA
FreeLibrary
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
GetExitCodeProcess
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
CloseHandle
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
InterlockedExchange
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
GetOEMCP
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetStringTypeA
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
GetDriveTypeA
LockResource
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetACP
GetEnvironmentStrings
UnmapViewOfFile
WriteFile
VirtualFree
Sleep
VirtualAlloc
ExitProcess
GetCurrentThread
GetTickCount
GetCurrentThreadId
GetVersion
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
InterlockedIncrement
GetLastError
user32
DispatchMessageA
FillRect
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
SetWindowPos
EnableWindow
ShowWindow
GetParent
DestroyWindow
EndPaint
SendMessageA
ReleaseDC
GetDC
PeekMessageA
PostQuitMessage
SetForegroundWindow
GetSystemMetrics
GetWindowRect
PostMessageA
SetWindowLongA
EndDialog
SetFocus
GetClientRect
SetCursor
SetWindowTextA
GetDlgItem
ScreenToClient
GetDesktopWindow
MoveWindow
MessageBoxA
GetSysColor
GetKeyState
IsWindowVisible
InvalidateRect
wsprintfA
DefWindowProcA
gdi32
DeleteObject
SetTextColor
CreateSolidBrush
CreateCompatibleDC
ole32
CoTaskMemFree
CoTaskMemAlloc
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExW
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyExW
msvcrt
_exit
_cexit
Sections
.text Size: 1.6MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ