Static task
static1
Behavioral task
behavioral1
Sample
a2e932eb9982a0a0db1fb2aec0b472bd696f9bc24ee6c225e1d880dda1aaaab4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2e932eb9982a0a0db1fb2aec0b472bd696f9bc24ee6c225e1d880dda1aaaab4.exe
Resource
win10v2004-20220812-en
General
-
Target
a2e932eb9982a0a0db1fb2aec0b472bd696f9bc24ee6c225e1d880dda1aaaab4
-
Size
586KB
-
MD5
87247d4f6c7baa26473fffaeddfdb166
-
SHA1
423f645154da279d9e1d3326ca739b56aa917390
-
SHA256
a2e932eb9982a0a0db1fb2aec0b472bd696f9bc24ee6c225e1d880dda1aaaab4
-
SHA512
f01dd116b91b13848da5d84bbd34e103c82ad95f00f2b7c567430e6dbf472a09a14a07fc35b1bd2e20a800b1d8195e3e6a29d9fbd10f4641d2c3024010027065
-
SSDEEP
12288:+ufZbbpHwmXWkXgnfDZNMxkx2U2JyxZq9c5DZ+NmUgfA5E:+sJVHXGnrHMySaZ0s+4Ff
Malware Config
Signatures
Files
-
a2e932eb9982a0a0db1fb2aec0b472bd696f9bc24ee6c225e1d880dda1aaaab4.exe windows x86
77c9ba30f8fdf9b9e1c5112e0b9f4915
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageW
CreatePropertySheetPage
InitCommonControlsEx
ImageList_AddIcon
ImageList_Merge
CreateStatusWindowW
ImageList_SetFilter
ImageList_EndDrag
GetEffectiveClientRect
ImageList_GetImageCount
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Create
ImageList_BeginDrag
DrawStatusTextA
ImageList_DrawEx
ImageList_Duplicate
ImageList_Replace
ImageList_Read
ImageList_Copy
ImageList_GetImageInfo
MakeDragList
ImageList_GetFlags
ImageList_GetIconSize
kernel32
GetLocaleInfoA
GetStartupInfoA
GetStringTypeW
EnumSystemLocalesA
HeapAlloc
GetLastError
GetModuleFileNameW
QueryPerformanceCounter
GetEnvironmentStringsW
SetStdHandle
GetCommandLineA
GetStringTypeA
GetDateFormatA
VirtualAlloc
GetUserDefaultLCID
GetProcAddress
GetVersionExA
WriteConsoleA
CompareStringA
GlobalAlloc
SetFilePointer
TerminateProcess
OpenMutexA
WriteFile
LoadLibraryA
VirtualFree
ReadFile
GetCurrentThread
HeapCreate
lstrcatW
TlsGetValue
TlsFree
TlsAlloc
IsValidCodePage
EnterCriticalSection
InterlockedExchange
SetHandleCount
GetOEMCP
VirtualQuery
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
CompareStringW
GetCurrentProcessId
LCMapStringW
MultiByteToWideChar
RtlUnwind
TlsSetValue
CreateMutexA
HeapFree
GetStdHandle
GetSystemInfo
GetLocaleInfoW
HeapSize
LeaveCriticalSection
InitializeCriticalSection
GetTickCount
GetCommandLineW
FlushFileBuffers
LCMapStringA
GetStartupInfoW
UnhandledExceptionFilter
GetCurrentThreadId
GetACP
GetModuleHandleA
CloseHandle
HeapReAlloc
GetDiskFreeSpaceExW
GetCPInfo
GetModuleFileNameA
ConvertDefaultLocale
GetTimeZoneInformation
GetProcessHeaps
GetTimeFormatW
IsBadWritePtr
WideCharToMultiByte
GetFileType
GetEnvironmentStrings
SetEnvironmentVariableA
ExitProcess
VirtualProtect
DeleteCriticalSection
GetTimeFormatA
GetCurrentProcess
GetAtomNameA
FreeEnvironmentStringsW
SetLastError
IsValidLocale
HeapDestroy
comdlg32
GetFileTitleA
GetSaveFileNameA
ReplaceTextA
user32
ShowWindow
DefWindowProcA
RegisterDeviceNotificationW
PostMessageW
MessageBoxW
RegisterClassA
DestroyWindow
UnregisterHotKey
EnableScrollBar
CreateWindowExW
RemovePropA
SetWindowsHookExW
MessageBeep
RegisterClassExA
MonitorFromWindow
PostMessageA
CloseClipboard
IsDialogMessageA
CreateIconFromResourceEx
Sections
.text Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ