Static task
static1
Behavioral task
behavioral1
Sample
0aefd674d61cd900eba21c2df1c82cf185f7146bc7b459849e37a9dd7521315c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0aefd674d61cd900eba21c2df1c82cf185f7146bc7b459849e37a9dd7521315c.exe
Resource
win10v2004-20220812-en
General
-
Target
0aefd674d61cd900eba21c2df1c82cf185f7146bc7b459849e37a9dd7521315c
-
Size
136KB
-
MD5
4486d1d5482f0b93a38cdeb825e5bca0
-
SHA1
bc35fc3cb4e6b1d38ee1574d0e5001679e537494
-
SHA256
0aefd674d61cd900eba21c2df1c82cf185f7146bc7b459849e37a9dd7521315c
-
SHA512
099ee2f4830a1b7427df18e26b4546b4ddd48b74be74e32242cacf724f00e9a8577f049e13f4e3aedd188239193328367a99c7ff283c4806cfbed855447a19b6
-
SSDEEP
3072:4JuTJwXpQhScceicNGFH0xVP4lBq/dVvdNRzoI7h+aS1Gj:4J4wZ8MeSFHmaq/dVvdHzo0naGj
Malware Config
Signatures
Files
-
0aefd674d61cd900eba21c2df1c82cf185f7146bc7b459849e37a9dd7521315c.exe windows x86
d3567ba431e72d2fd4fd1a8f7f1e6615
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
DeleteFileA
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
RemoveDirectoryA
FindClose
FindFirstFileA
Sleep
GetDiskFreeSpaceA
GetDriveTypeA
GetFileAttributesA
GetProcAddress
LoadLibraryA
CopyFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
LocalUnlock
LocalLock
LocalAlloc
CloseHandle
ReadFile
WriteFile
SetFilePointer
GetFileSize
LocalFileTimeToFileTime
SetFileTime
CreateFileA
CompareFileTime
GetSystemTimeAsFileTime
WideCharToMultiByte
CompareStringW
CompareStringA
lstrcpyA
VirtualProtect
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCPInfo
GetOEMCP
GetACP
FlushFileBuffers
SetStdHandle
VirtualQuery
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetEnvironmentVariableA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
lstrcatA
FreeLibrary
GetLastError
FormatMessageA
LocalFree
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetTimeZoneInformation
GetSystemInfo
GetModuleFileNameA
HeapFree
HeapSize
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapReAlloc
HeapAlloc
ExitProcess
TerminateProcess
user32
ShowWindow
CreateWindowExA
SetTimer
UpdateWindow
IsWindow
CharLowerBuffA
MoveWindow
GetClientRect
SetWindowTextA
SendMessageA
CreateDialogParamA
CreateDialogIndirectParamA
PeekMessageA
PostMessageA
wvsprintfA
MessageBoxA
GetDlgItem
GetParent
GetMessageA
DispatchMessageA
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
PostQuitMessage
DefWindowProcA
KillTimer
DestroyWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
GetSystemMetrics
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
comctl32
ord17
urlmon
CreateURLMoniker
CreateAsyncBindCtx
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ