Static task
static1
Behavioral task
behavioral1
Sample
2f7a1e4ab6617c6090fa6b6a5525b97b69fc090b61849db14b4c6eb9f20a1390.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2f7a1e4ab6617c6090fa6b6a5525b97b69fc090b61849db14b4c6eb9f20a1390.exe
Resource
win10v2004-20220812-en
General
-
Target
2f7a1e4ab6617c6090fa6b6a5525b97b69fc090b61849db14b4c6eb9f20a1390
-
Size
344KB
-
MD5
8d0aa315e2f1a62dd31b2b53ecd0d020
-
SHA1
43b57fac5929ec0ecc9217d2d5c4c9ce18ac787c
-
SHA256
2f7a1e4ab6617c6090fa6b6a5525b97b69fc090b61849db14b4c6eb9f20a1390
-
SHA512
7075eb2661c912d343b06201b494668768c1e4d4f07a57634e1ce1b9393017f93f29da787c439fd5377779de294e753e3d7b9f053f8cb48f45aded4456591c6d
-
SSDEEP
6144:gwvSxOJzS4cqthEus5iwSMdKph8FtPhr:PcqthTs5iwSMqCl
Malware Config
Signatures
Files
-
2f7a1e4ab6617c6090fa6b6a5525b97b69fc090b61849db14b4c6eb9f20a1390.exe windows x86
ab1c0812d830512b74e3e8dcad170827
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
SearchPathA
GetVersionExA
GetStringTypeA
DeviceIoControl
RtlUnwind
GetFileType
WriteFile
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapCreate
HeapDestroy
UnhandledExceptionFilter
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetOEMCP
GetACP
WideCharToMultiByte
HeapSize
HeapReAlloc
GetCPInfo
GetCommandLineA
GetStartupInfoA
GetVersion
GetCurrentProcess
TerminateProcess
GetModuleHandleA
HeapFree
HeapAlloc
VirtualAlloc
ExitProcess
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
SetEndOfFile
ReadFile
GlobalFree
IsBadWritePtr
VirtualFree
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
CloseHandle
CreateFileA
OpenFile
user32
GetDesktopWindow
ClientToScreen
IsWindowVisible
GetSystemMetrics
ScreenToClient
IsZoomed
EndDialog
GetWindowRect
GetClientRect
IsIconic
ReleaseDC
GetDC
MessageBoxA
wsprintfA
DispatchMessageA
PeekMessageA
ShowWindow
TranslateMessage
FindWindowA
SetCursor
SetForegroundWindow
LoadCursorA
CreateWindowExA
RegisterClassA
SetTimer
EndPaint
GetUpdateRect
BeginPaint
AdjustWindowRect
DestroyWindow
DefWindowProcA
UpdateWindow
SetWindowTextA
InvalidateRect
LoadStringA
PostQuitMessage
DialogBoxParamA
SendMessageA
SetDlgItemTextA
GetDlgItem
SetWindowPos
gdi32
CreateCompatibleDC
CreatePalette
GetSystemPaletteEntries
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
GetDeviceCaps
SelectObject
CreatePen
Rectangle
SelectPalette
RealizePalette
CreateDIBSection
advapi32
RegEnumKeyExA
RegFlushKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
RegCloseKey
StartServiceA
CreateServiceA
DeleteService
OpenServiceA
ControlService
OpenSCManagerA
winmm
timeGetTime
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CPUCAP_T Size: 4KB - Virtual size: 335B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IS_MMX_T Size: 4KB - Virtual size: 46B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
auiirvo Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xpgdpaa Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE