Static task
static1
Behavioral task
behavioral1
Sample
a8e3f00d79a4d822c0b948bb6ffd62dda26d0b3bd4516023375b0b066d2f6d61.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8e3f00d79a4d822c0b948bb6ffd62dda26d0b3bd4516023375b0b066d2f6d61.exe
Resource
win10v2004-20220812-en
General
-
Target
a8e3f00d79a4d822c0b948bb6ffd62dda26d0b3bd4516023375b0b066d2f6d61
-
Size
4.6MB
-
MD5
8acc0dc47b3516acad01ee8a25c865c5
-
SHA1
cd77b9f79e224c8de0e50bd872dfae17c82983f1
-
SHA256
a8e3f00d79a4d822c0b948bb6ffd62dda26d0b3bd4516023375b0b066d2f6d61
-
SHA512
e02246623b9d4a6c17f901d1837feaa75b90a06c2b74917730d1a8ff1403ff98b02c2a7ce327c4df27fc0a304e32bc0f6841c4183b258f17cbfc865b0357507d
-
SSDEEP
49152:9heoGUjQAuwgnz0p+jGnLJBTC4+Gmr4/ewu+tETYlmOnhEOP0VijkZmyjdI78aOk:MGgop+jkP24pm2G+ETYLhjsVijk0CI
Malware Config
Signatures
Files
-
a8e3f00d79a4d822c0b948bb6ffd62dda26d0b3bd4516023375b0b066d2f6d61.exe windows x86
12628aafb65bf0d082243ac8ba7df045
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetCurrentProcess
Sleep
WideCharToMultiByte
MultiByteToWideChar
HeapAlloc
CreateMutexA
GetModuleHandleExW
GetLastError
FileTimeToSystemTime
ExitProcess
SetLastError
GetModuleHandleA
GetVersionExA
WaitForSingleObject
FileTimeToLocalFileTime
EnterCriticalSection
VirtualAlloc
VirtualFree
GetCurrentThread
GetFileAttributesA
CloseHandle
GetTempPathA
LoadLibraryA
HeapReAlloc
GetProcAddress
LocalFileTimeToFileTime
RemoveDirectoryA
IsBadWritePtr
HeapFree
InitializeCriticalSection
GetProcessHeap
GetTickCount
InterlockedCompareExchange
DeleteCriticalSection
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
SetEndOfFile
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
GetStartupInfoW
GetFileType
ReadConsoleW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
advapi32
RegOpenKeyA
RegEnumKeyA
RegEnumKeyExA
RegQueryValueExW
RegQueryValueW
RegEnumKeyExW
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyW
RegEnumKeyW
RegQueryInfoKeyA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegCreateKeyW
user32
SendMessageW
DestroyWindow
GetWindowTextA
GetMessageW
AppendMenuA
DefWindowProcW
DispatchMessageA
GetSystemMetrics
RegisterClassExW
MessageBoxW
SetForegroundWindow
GetDesktopWindow
GetParent
CreateWindowExA
MsgWaitForMultipleObjects
GetClientRect
SendMessageA
PeekMessageW
RegisterWindowMessageW
RegisterClassExA
RegisterWindowMessageA
GetWindowTextW
UpdateWindow
LoadIconA
SetWindowPos
LoadIconW
GetWindowRect
GetDlgItem
PostMessageA
MessageBoxA
TrackPopupMenu
GetMessageA
SetFocus
RedrawWindow
CreatePopupMenu
BringWindowToTop
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ