Static task
static1
Behavioral task
behavioral1
Sample
0a3f3c88ef71cdf94959fa116ba25458608d080371f7603bd727e293a12159bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a3f3c88ef71cdf94959fa116ba25458608d080371f7603bd727e293a12159bd.exe
Resource
win10v2004-20221111-en
General
-
Target
0a3f3c88ef71cdf94959fa116ba25458608d080371f7603bd727e293a12159bd
-
Size
150KB
-
MD5
e4b4b37634d3cfb55125b79df4b63e03
-
SHA1
19019241f1ee5b693c3708f5b6fa62eaf9bc3d79
-
SHA256
0a3f3c88ef71cdf94959fa116ba25458608d080371f7603bd727e293a12159bd
-
SHA512
9690c92b1768e2cdf2b116832b3cf1f5d1945380787651d3f8951461405ffdca30e55547777862c216afd63f698867b43a0c1f26e3333cf72024be18ca7feb2a
-
SSDEEP
3072:W3vMLi/wq0/meL65Tf7iMN5XM2ztHa+34H2S6DjwE84O:Kai/C6V7iMNdJzNomE
Malware Config
Signatures
Files
-
0a3f3c88ef71cdf94959fa116ba25458608d080371f7603bd727e293a12159bd.exe windows x86
b721e1667a5fe7174d9ae191dab00b3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
DlgDirListA
GetKeyboardLayout
wvsprintfW
CloseDesktop
GetComboBoxInfo
SetRect
IsCharLowerA
DdeFreeStringHandle
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
GetScrollInfo
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
IsDlgButtonChecked
ChangeClipboardChain
ole32
WriteClassStg
CoFileTimeNow
CoSetProxyBlanket
MonikerRelativePathTo
advapi32
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleCP
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
SetFilePointer
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetConsoleMode
GetProcAddress
GetCPInfo
RaiseException
GetSystemTimeAsFileTime
VirtualAlloc
CloseHandle
CreateThread
GetSystemTime
EraseTape
SetConsoleWindowInfo
VerSetConditionMask
GlobalMemoryStatusEx
WriteFile
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ