Static task
static1
Behavioral task
behavioral1
Sample
1a8cf5bdc00e55702d307e4ba21755ec8a43948f9b21f307ecae46c4b4d03f51.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1a8cf5bdc00e55702d307e4ba21755ec8a43948f9b21f307ecae46c4b4d03f51.exe
Resource
win10v2004-20221111-en
General
-
Target
1a8cf5bdc00e55702d307e4ba21755ec8a43948f9b21f307ecae46c4b4d03f51
-
Size
300KB
-
MD5
f236d88b706d6ab081cb3910f5f86eab
-
SHA1
8a3ecd88ba38836d7738092d5a7608df42335215
-
SHA256
1a8cf5bdc00e55702d307e4ba21755ec8a43948f9b21f307ecae46c4b4d03f51
-
SHA512
516a52fb07a6656ba10475bcb4b79158bd52b50acfa1641e63dc241acfff3fcd69a4e55841c97d57b8cc7123108bd9613a24e8acbfc0665e886d197e4bec360b
-
SSDEEP
6144:2ABgDLrvf9+r+goq1qrQVKYbOGirDJXTVoeNacMHQ:wDP1goqQ8UMBUDMeNax
Malware Config
Signatures
Files
-
1a8cf5bdc00e55702d307e4ba21755ec8a43948f9b21f307ecae46c4b4d03f51.exe windows x86
06db005367a5590a616d3bbea4be922b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommConfig
FreeEnvironmentStringsW
GetLastError
SetHandleInformation
GetShortPathNameA
GlobalGetAtomNameA
GetExitCodeThread
MoveFileW
_hread
BackupWrite
PrepareTape
GetPrivateProfileStructA
GlobalReAlloc
WaitForMultipleObjects
EnumDateFormatsW
GetConsoleMode
WriteProfileStringA
GetDateFormatW
ScrollConsoleScreenBufferA
CancelWaitableTimer
GetLongPathNameW
HeapFree
GlobalFindAtomA
AddAtomA
GetFileSize
SetEnvironmentVariableA
ExpandEnvironmentStringsA
GetCurrentProcess
GetTickCount
SetMailslotInfo
SetConsoleMode
lstrcatW
OpenFileMappingW
FindFirstFileA
CreateDirectoryExW
UpdateResourceA
GetVersionExA
FindAtomA
SetCommMask
GetComputerNameA
GetConsoleCP
GetStartupInfoA
WriteProfileStringW
CreateMutexA
SetNamedPipeHandleState
_llseek
GetVolumeInformationA
IsValidLocale
GetModuleHandleA
user32
GetDC
CreateDialogIndirectParamW
GetClassLongA
FrameRect
DefMDIChildProcW
OemToCharA
GetMenuDefaultItem
LoadCursorFromFileW
RegisterWindowMessageA
GetPropA
SetMenuItemBitmaps
SetWinEventHook
OemToCharBuffA
DragDetect
SetScrollPos
CreateWindowExW
AttachThreadInput
RegisterDeviceNotificationW
DestroyAcceleratorTable
LoadIconA
MessageBoxW
IsCharAlphaW
SetWindowContextHelpId
SetWindowsHookW
GetWindowTextW
GetDlgItemTextW
CharNextW
DrawEdge
BeginPaint
ChildWindowFromPointEx
gdi32
GetTextColor
GetTextCharset
EnumFontFamiliesA
EnumFontFamiliesExA
RemoveFontResourceW
GetViewportExtEx
GetGlyphOutlineW
comdlg32
PageSetupDlgA
GetSaveFileNameA
advapi32
RegNotifyChangeKeyValue
SetNamedSecurityInfoA
OpenSCManagerW
SetKernelObjectSecurity
OpenServiceA
StartServiceCtrlDispatcherA
GetFileSecurityW
RegEnumValueA
AbortSystemShutdownW
ChangeServiceConfigA
ImpersonateSelf
GetNamedSecurityInfoW
CloseServiceHandle
LookupPrivilegeValueW
OpenThreadToken
RegFlushKey
CreateProcessAsUserW
IsValidAcl
CryptSignHashW
IsValidSid
SetFileSecurityW
RegConnectRegistryA
GetSecurityDescriptorOwner
IsValidSecurityDescriptor
RegSetValueW
CryptDecrypt
MakeAbsoluteSD
shell32
DragQueryFileA
ShellExecuteW
SHBrowseForFolderW
SHGetSpecialFolderPathA
ole32
OleNoteObjectVisible
CoResumeClassObjects
CreateDataAdviseHolder
CoFreeUnusedLibraries
CoUninitialize
CoGetCallContext
CreateGenericComposite
oleaut32
SafeArrayPtrOfIndex
SafeArrayUnaccessData
LoadTypeLi
SafeArrayCreateVector
SafeArrayCreate
comctl32
InitCommonControlsEx
ImageList_SetImageCount
ImageList_Add
CreateStatusWindowW
shlwapi
PathRemoveFileSpecA
StrCmpNIW
PathIsPrefixW
PathQuoteSpacesA
SHRegCloseUSKey
StrStrA
PathCombineA
StrChrA
PathFindOnPathW
StrPBrkW
SHEnumValueW
PathRemoveFileSpecW
StrCmpNIA
PathIsNetworkPathW
StrCmpLogicalW
PathIsFileSpecA
PathIsURLW
SHDeleteValueW
PathRemoveExtensionW
PathCompactPathW
setupapi
SetupLogErrorW
SetupDiGetDeviceInstallParamsW
SetupCloseInfFile
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
msvcrt
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
N3859T97 Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GLBoLwMi Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
3QFJ80pj Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE