Static task
static1
Behavioral task
behavioral1
Sample
0896178f88a9431b86a8fd962739ee29fd17c51e1df937997333d0386eb073a1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0896178f88a9431b86a8fd962739ee29fd17c51e1df937997333d0386eb073a1.exe
Resource
win10v2004-20220901-en
General
-
Target
0896178f88a9431b86a8fd962739ee29fd17c51e1df937997333d0386eb073a1
-
Size
3.6MB
-
MD5
52b8b45ecd5568f59df1f03225027997
-
SHA1
c859ecbe12a8cae16dbc92f03232b820f753ce86
-
SHA256
0896178f88a9431b86a8fd962739ee29fd17c51e1df937997333d0386eb073a1
-
SHA512
6189523517cded5345c7c8b6a3ad32da9383e6da40b58914a8af2699d32e7e5d02ed32573ab09cbeb9702d5bb73ea89ad0259e3486da132be81dce31c76d7382
-
SSDEEP
49152:10HWwWu32f3QuTS/7QfxSGnfZ8/v7usZ+qjbvIHRZOvJnZ16TA7:10H9Wqa3a8fDy37KqHIHXORnD
Malware Config
Signatures
Files
-
0896178f88a9431b86a8fd962739ee29fd17c51e1df937997333d0386eb073a1.exe windows x86
971d3de3b11e658f8336d3b635535cb5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
InitializeCriticalSection
GetLocalTime
DisableThreadLibraryCalls
GetProcessHeap
HeapFree
CreateMutexA
GetModuleHandleExW
Sleep
GetLastError
GetTickCount
HeapAlloc
ExitProcess
SetLastError
GetModuleHandleA
GetVersionExA
EnterCriticalSection
DeleteCriticalSection
ReadFile
WaitForSingleObject
LocalFileTimeToFileTime
VirtualAlloc
VirtualFree
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
HeapReAlloc
DuplicateHandle
GetFileAttributesA
GetTempPathA
GetProcAddress
LoadLibraryA
RemoveDirectoryA
CreateFileA
FileTimeToSystemTime
InterlockedCompareExchange
CloseHandle
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetModuleHandleW
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW
advapi32
RegCreateKeyW
RegEnumKeyExA
RegOpenKeyW
RegEnumKeyA
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyW
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueW
RegQueryInfoKeyA
user32
DispatchMessageA
PostQuitMessage
PostMessageA
GetDesktopWindow
RedrawWindow
LoadIconW
FindWindowW
RegisterWindowMessageW
PeekMessageW
SendMessageW
SetWindowPos
DefWindowProcW
MsgWaitForMultipleObjects
BringWindowToTop
PeekMessageA
MessageBoxW
TrackPopupMenu
SendMessageA
DispatchMessageW
RegisterWindowMessageA
PostMessageW
SetForegroundWindow
CreateWindowExA
UpdateWindow
RegisterClassExA
GetLastInputInfo
CheckMenuItem
DefWindowProcA
GetSystemMetrics
GetDlgItem
FindWindowA
EnumWindows
GetMessageA
Sections
.text Size: 581KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ