Static task
static1
Behavioral task
behavioral1
Sample
81ae7d8fabd835b41b23ed8496d53c5c10b47be365b09b85dad78273506c7943.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81ae7d8fabd835b41b23ed8496d53c5c10b47be365b09b85dad78273506c7943.exe
Resource
win10v2004-20220901-en
General
-
Target
81ae7d8fabd835b41b23ed8496d53c5c10b47be365b09b85dad78273506c7943
-
Size
776KB
-
MD5
8e7dc131bafd1e8e20cd3c26264ac9e4
-
SHA1
a8da1daecc1919c7774f4ae3256a32bea76ab086
-
SHA256
81ae7d8fabd835b41b23ed8496d53c5c10b47be365b09b85dad78273506c7943
-
SHA512
c4191950f47e12b3a5a146440d1bad5ab2445717a6a275268abaa4c36d7a1a809749e899388239c1dc10136d115dfbcc98357cb3b42935a47520653181b08fa5
-
SSDEEP
24576:cDYD6EB6X1mYeRetqYKuO55S2JktrsI/i:cDDEB61a88uO55S28rsIa
Malware Config
Signatures
Files
-
81ae7d8fabd835b41b23ed8496d53c5c10b47be365b09b85dad78273506c7943.exe windows x86
fe46a1f3c6147c79338956006b1738f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptGetUserKey
CryptEnumProviderTypesA
CryptDecrypt
RegEnumKeyExW
RegSaveKeyA
RegCreateKeyExW
ReportEventA
RegDeleteKeyW
LogonUserW
CryptSignHashW
CreateServiceA
CryptExportKey
CryptVerifySignatureA
LookupSecurityDescriptorPartsW
LookupPrivilegeValueW
LookupSecurityDescriptorPartsA
RegOpenKeyW
comctl32
ImageList_GetFlags
ImageList_SetIconSize
ImageList_GetIcon
ImageList_Replace
ImageList_EndDrag
ImageList_GetDragImage
ImageList_GetIconSize
DrawStatusTextA
ImageList_DragLeave
DrawStatusTextW
InitCommonControlsEx
CreateMappedBitmap
ImageList_Draw
ImageList_Destroy
DrawInsert
kernel32
UnhandledExceptionFilter
GetTimeFormatA
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
LeaveCriticalSection
FreeLibrary
MoveFileExW
MultiByteToWideChar
GetModuleHandleW
GetLocaleInfoW
GetConsoleCP
FindAtomW
GetACP
GetStartupInfoW
GetFileType
GetStringTypeA
HeapCreate
GetDateFormatA
WriteFile
HeapAlloc
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetOEMCP
FreeEnvironmentStringsW
Sleep
SetThreadContext
GetModuleHandleA
GetPrivateProfileStringA
EnumSystemLocalesA
CompareStringA
HeapFree
WriteProfileStringA
ResetEvent
GetFullPathNameA
lstrcpyA
GetCurrentProcessId
GetCurrentProcess
SetFilePointer
InitializeCriticalSectionAndSpinCount
TlsSetValue
IsDebuggerPresent
WriteConsoleW
ReadConsoleOutputCharacterW
VirtualFree
CreateFileA
CloseHandle
IsValidCodePage
GetPrivateProfileSectionW
GetCommandLineA
GetProfileStringW
GetCurrentDirectoryW
TlsAlloc
GetCPInfo
FlushInstructionCache
GetUserDefaultLCID
GetLastError
GetCommandLineW
UnmapViewOfFile
SetLastError
EnterCriticalSection
GetStringTypeW
WritePrivateProfileStructA
GetTimeZoneInformation
VirtualQuery
GetStdHandle
CreateProcessA
GetModuleFileNameW
GetCurrentDirectoryA
CreateMutexA
GetProcAddress
FlushFileBuffers
HeapSize
TlsGetValue
HeapDestroy
DosDateTimeToFileTime
SystemTimeToFileTime
VirtualAlloc
DeleteFileA
WideCharToMultiByte
RtlUnwind
CreateThread
GetEnvironmentStringsW
SetConsoleCursorPosition
lstrcpyn
AddAtomW
TlsFree
GetConsoleMode
GlobalCompact
GetAtomNameA
IsValidLocale
WriteConsoleA
GetPriorityClass
CreateWaitableTimerA
GetLocaleInfoA
DeleteCriticalSection
OpenMutexA
GetPrivateProfileStringW
GetCurrentThread
GetCompressedFileSizeA
LCMapStringW
TransmitCommChar
InterlockedExchange
GetNumberFormatW
GetTickCount
GetVersionExA
CompareStringW
GetDriveTypeW
InterlockedDecrement
SetConsoleCtrlHandler
SetThreadPriority
HeapReAlloc
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
InterlockedIncrement
SetEnvironmentVariableA
ExitProcess
SetHandleCount
CreateSemaphoreW
CreateDirectoryExA
SetEvent
GetStartupInfoA
GetModuleFileNameA
GetConsoleOutputCP
ReadFile
LCMapStringA
SetFileTime
SetStdHandle
GlobalUnlock
user32
DdeInitializeW
GetShellWindow
DestroyWindow
RegisterClassExA
GetWindowWord
SetWindowsHookExA
GetNextDlgTabItem
DdeAbandonTransaction
DestroyCursor
GetMenuItemInfoA
InternalGetWindowText
IsCharUpperW
UnionRect
TabbedTextOutW
ModifyMenuA
ScreenToClient
VkKeyScanExW
SetDlgItemInt
GetWindowModuleFileNameW
SetWindowsHookW
ShowWindow
DrawTextExA
GetPriorityClipboardFormat
EnableMenuItem
GetQueueStatus
SendNotifyMessageA
DdeQueryStringA
RegisterClassA
LoadImageW
SetScrollInfo
LoadCursorW
CascadeChildWindows
FrameRect
InsertMenuA
MessageBoxA
GetProcessWindowStation
SendIMEMessageExW
GetClipboardOwner
InsertMenuItemA
LookupIconIdFromDirectory
CallMsgFilter
EnumDisplayDevicesA
IsCharAlphaW
LockWindowUpdate
IsWindowVisible
CreateIcon
CreateWindowExA
CheckMenuRadioItem
ChangeDisplaySettingsExA
GetWindowModuleFileNameA
GetForegroundWindow
GetKBCodePage
SetMenuDefaultItem
SystemParametersInfoA
DefWindowProcW
DdeAddData
PeekMessageA
Sections
.text Size: 204KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 408KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ