Static task
static1
Behavioral task
behavioral1
Sample
12c7aa460e13cd46d15608d3451b503ef732d509ffe46d155cf6b4fcc15cb29f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
12c7aa460e13cd46d15608d3451b503ef732d509ffe46d155cf6b4fcc15cb29f.exe
Resource
win10v2004-20220812-en
General
-
Target
12c7aa460e13cd46d15608d3451b503ef732d509ffe46d155cf6b4fcc15cb29f
-
Size
667KB
-
MD5
43ff5db667669a6d078f9febd0235b89
-
SHA1
505ef5461f4deea753140660695df10ce18a660e
-
SHA256
12c7aa460e13cd46d15608d3451b503ef732d509ffe46d155cf6b4fcc15cb29f
-
SHA512
6b68910bf9ee343fa91a1e9003f7dbf2e70eb3cf6a2ff4ca087003824fe8f75431a57a1f55412ef890bb4c1a2c9c7714b38caac5bd3acf6a16c76d6022bd3ad1
-
SSDEEP
12288:GFh7H7uNgUbXjgBxgTCz+QWeUA+/Q7jzPPs745P1pbdJZT2mhCx5:GFti500Cz+HT03gkvfKmhS5
Malware Config
Signatures
Files
-
12c7aa460e13cd46d15608d3451b503ef732d509ffe46d155cf6b4fcc15cb29f.exe windows x86
d51217e403126ec89c8b30e9f8dbdab8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetCurrentProcessId
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
GetCurrentThread
GetVersion
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
UnmapViewOfFile
GetLocalTime
GetEnvironmentStrings
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
HeapSize
GetCPInfo
GetCommandLineW
SizeofResource
RemoveDirectoryA
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
FindResourceW
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
GetLastError
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
WaitForMultipleObjects
DuplicateHandle
CompareStringA
FindFirstFileA
CompareStringW
GetProcAddress
GetStartupInfoW
SetErrorMode
DeleteFileA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
GetOEMCP
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
GetVersionExA
IsDebuggerPresent
GetModuleFileNameW
SetLastError
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
SetEvent
GetStringTypeW
HeapReAlloc
SetStdHandle
GetTimeZoneInformation
WriteFile
InterlockedExchange
GetSystemTimeAsFileTime
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetExitCodeProcess
GetFileAttributesW
HeapDestroy
LockResource
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
lstrlenW
GetConsoleOutputCP
GetStdHandle
user32
SetCursor
CallWindowProcA
GetClientRect
wsprintfA
InvalidateRect
GetFocus
SystemParametersInfoA
MessageBoxA
MoveWindow
EndDialog
GetDesktopWindow
TrackPopupMenu
ScreenToClient
GetDlgItem
CheckMenuItem
PostMessageA
GetWindowRect
GetSystemMetrics
BeginPaint
SetFocus
EndPaint
DispatchMessageA
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
TranslateMessage
SetWindowPos
EnableWindow
ShowWindow
UpdateWindow
GetParent
DestroyWindow
ReleaseDC
GetCursorPos
GetDC
SetForegroundWindow
PeekMessageA
IsWindow
PostQuitMessage
DestroyMenu
MapWindowPoints
Sections
.text Size: 642KB - Virtual size: 965KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ