Static task
static1
Behavioral task
behavioral1
Sample
0ea359dc7818df952fa77ca3c04d302e74f0c3c15a47b49b3246b0db71a6d6e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ea359dc7818df952fa77ca3c04d302e74f0c3c15a47b49b3246b0db71a6d6e8.exe
Resource
win10v2004-20220812-en
General
-
Target
0ea359dc7818df952fa77ca3c04d302e74f0c3c15a47b49b3246b0db71a6d6e8
-
Size
488KB
-
MD5
961361922c8ef882b6e49859f80fb53d
-
SHA1
ecae1a8c0247bab10b236f0925e51307dabd425e
-
SHA256
0ea359dc7818df952fa77ca3c04d302e74f0c3c15a47b49b3246b0db71a6d6e8
-
SHA512
97b9d4b4f4f28c915e47c150dcd2b827bb82bb2cf55785004250f3d69f02554b03f7438533188c8478f3622f5306c8720604072955f1859b5527c501b926d9fe
-
SSDEEP
12288:pt0XoV9Ta0vYvLMrRAEf8fQyAAxcEFPPap:4E92Cm8RA2yPcEFHap
Malware Config
Signatures
Files
-
0ea359dc7818df952fa77ca3c04d302e74f0c3c15a47b49b3246b0db71a6d6e8.exe windows x86
905ad7b7d178f1c7f1f83e0be7b0f2a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
GetVolumeInformationA
GetVersionExA
GlobalHandle
GlobalAddAtomA
FreeEnvironmentStringsW
FindNextFileA
MapViewOfFile
SetCurrentDirectoryA
GetFileAttributesW
GlobalLock
GetEnvironmentStrings
DeleteFileW
GetFileTime
IsValidCodePage
UnmapViewOfFile
QueryPerformanceCounter
WaitForSingleObject
ReadFile
GetCurrentProcess
HeapDestroy
GetTempPathA
GlobalSize
FileTimeToLocalFileTime
LocalFree
InterlockedExchange
GetCurrentDirectoryA
GetStringTypeExA
GetTempFileNameA
ExitProcess
TlsAlloc
ReleaseSemaphore
SetErrorMode
SetEnvironmentVariableA
GetFileAttributesA
TerminateProcess
lstrlenW
GetLastError
GlobalFree
GetSystemInfo
lstrcpyA
GetFileType
GetTickCount
RaiseException
FindResourceA
OutputDebugStringA
SetFileTime
CreateThread
CompareStringW
FileTimeToSystemTime
lstrcmpiA
GetConsoleCP
GlobalReAlloc
WriteFile
CreateMutexA
GetFileSize
SetThreadPriority
GetModuleFileNameW
GetTimeZoneInformation
VirtualProtect
GetExitCodeThread
Sleep
LoadResource
CreateProcessA
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
WriteConsoleW
GetUserDefaultLCID
CloseHandle
InterlockedCompareExchange
LockResource
GetEnvironmentVariableA
SizeofResource
lstrlenA
GetStringTypeA
FreeLibrary
GetStartupInfoA
GetProcessHeap
LCMapStringW
GetStringTypeW
ResumeThread
GetCurrentProcessId
CompareStringA
IsDebuggerPresent
CreateEventA
GetFileInformationByHandle
SetStdHandle
ReleaseMutex
HeapFree
UnhandledExceptionFilter
MulDiv
GetSystemTimeAsFileTime
TlsGetValue
SetFileAttributesA
EnterCriticalSection
TlsFree
CopyFileA
GetThreadLocale
GlobalDeleteAtom
lstrcatA
WaitForMultipleObjects
IsBadReadPtr
CreatePipe
GetLocalTime
HeapAlloc
GetTimeFormatA
GetVersion
GetACP
VirtualFree
DeleteCriticalSection
GetLocaleInfoA
LoadLibraryA
SetUnhandledExceptionFilter
DeviceIoControl
ResetEvent
FindClose
EnumSystemLocalesA
SystemTimeToFileTime
GetCommandLineA
GetLocaleInfoW
GetProcAddress
lstrcmpW
FlushFileBuffers
LCMapStringA
DuplicateHandle
GlobalFlags
RemoveDirectoryA
CreateSemaphoreA
HeapCreate
CreateDirectoryW
GlobalUnlock
LockFile
DeleteFileA
InterlockedDecrement
TerminateThread
GetEnvironmentStringsW
GetModuleFileNameA
FreeResource
SetEvent
RtlUnwind
SetEndOfFile
CreateFileMappingA
GetConsoleMode
CreateFileW
MoveFileA
GetDriveTypeA
LeaveCriticalSection
SetEnvironmentVariableW
GlobalAlloc
GetSystemTime
WinExec
GetDateFormatA
GetOEMCP
UnlockFile
SetLastError
HeapReAlloc
GetTempPathW
SetHandleCount
IsValidLocale
GetWindowsDirectoryA
TlsSetValue
GetCurrentThread
GetSystemDirectoryA
InitializeCriticalSection
CreateFileA
WriteConsoleA
SetFilePointer
HeapSize
VirtualAlloc
VirtualQuery
GetCurrentThreadId
lstrcmpA
CreateDirectoryA
FreeEnvironmentStringsA
GetModuleHandleA
ConvertDefaultLocale
LocalAlloc
FindFirstFileA
InterlockedIncrement
lstrcpynA
GetStdHandle
gdi32
SetArcDirection
OffsetWindowOrgEx
GetTextExtentPoint32A
SetViewportExtEx
SetPolyFillMode
GetStockObject
CreatePen
BitBlt
RestoreDC
GetPath
GetWindowOrgEx
ExtCreatePen
PatBlt
CreateHatchBrush
ExtCreateRegion
ScaleWindowExtEx
LPtoDP
SetTextJustification
ExtTextOutA
CreateCompatibleBitmap
SetBoundsRect
GetClipBox
CopyMetaFileA
FrameRgn
OffsetViewportOrgEx
SaveDC
StartDocA
CreateRoundRectRgn
CreateSolidBrush
GetDCOrgEx
DeleteObject
EqualRgn
CombineRgn
SetPixel
StretchBlt
Polyline
UnrealizeObject
ResizePalette
SelectObject
IntersectClipRect
Chord
ScaleViewportExtEx
PathToRegion
GetCurrentPositionEx
CreateRectRgn
UpdateColors
PolyBezierTo
FlattenPath
CreatePenIndirect
PolylineTo
CreateFontA
SetBkMode
StretchDIBits
SetTextColor
LineTo
SetBkColor
user32
GetMessagePos
FindWindowA
OpenClipboard
DestroyAcceleratorTable
GetWindowLongA
GetSubMenu
GetSystemMetrics
SetWindowTextA
SetWindowContextHelpId
SetFocus
GetKeyState
IsWindowEnabled
ShowWindow
LoadBitmapA
ShowScrollBar
GetClassInfoExA
CreateWindowExA
IsChild
AppendMenuA
GetClassInfoA
GetMenuItemInfoA
LoadCursorA
LoadAcceleratorsA
LoadStringA
ScrollWindowEx
MoveWindow
PostMessageA
DefWindowProcA
LoadMenuA
GetDesktopWindow
OffsetRect
IsIconic
GetMessageTime
GetParent
InvalidateRgn
GetClientRect
SetDlgItemTextA
RegisterClassExA
TrackPopupMenu
ModifyMenuA
DrawEdge
InvalidateRect
InflateRect
RegisterClassA
DestroyWindow
GetDlgItem
GetMenu
MessageBoxA
DispatchMessageA
GetDC
shell32
SHGetSpecialFolderLocation
ord155
SHGetMalloc
SHFileOperationA
version
VerQueryValueA
GetFileVersionInfoSizeA
comctl32
ord17
DestroyPropertySheetPage
InitCommonControlsEx
ImageList_GetIcon
winspool.drv
ord204
ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA
comdlg32
PrintDlgA
ChooseColorA
Sections
.text Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ