Static task
static1
Behavioral task
behavioral1
Sample
a99079adc49cec3bb0fc868ad27d33259264dd7fd26b1b06c6b1e6bed91a0594.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a99079adc49cec3bb0fc868ad27d33259264dd7fd26b1b06c6b1e6bed91a0594.exe
Resource
win10v2004-20220812-en
General
-
Target
a99079adc49cec3bb0fc868ad27d33259264dd7fd26b1b06c6b1e6bed91a0594
-
Size
213KB
-
MD5
131ec14c21613cecaa92fdf35cf3b319
-
SHA1
54ae779fa41625ddf4d527ed95068f792afc77cb
-
SHA256
a99079adc49cec3bb0fc868ad27d33259264dd7fd26b1b06c6b1e6bed91a0594
-
SHA512
97045a4efc9252eb8749137f4ae644cf5030f58840824d025313311f6ef4f78a80a26bba9accd75b7d5021f4adbe1d0e9758934d1a7a8d5743a873e91319f43b
-
SSDEEP
3072:ZAg0FuA1b5v+1Tp13H4gtxB3tzREnkvZOIzcKMUbMKJjIn:ZAOA1+TpNjZZRPBOI4yMN
Malware Config
Signatures
Files
-
a99079adc49cec3bb0fc868ad27d33259264dd7fd26b1b06c6b1e6bed91a0594.exe windows x86
2bec3558a48e5ea2468986984a9b7215
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
CreateDialogParamW
SetWindowTextW
wsprintfW
SendMessageTimeoutW
LoadCursorW
GetWindowLongW
CharNextW
GetClassInfoW
FindWindowExW
SetWindowLongW
LoadImageW
SendMessageW
DefWindowProcW
DrawTextW
ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PeekMessageA
kernel32
ExitProcess
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
GetLocaleInfoW
RaiseException
FlushFileBuffers
GetConsoleMode
GetConsoleCP
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapReAlloc
HeapAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
DeleteCriticalSection
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LCMapStringW
LCMapStringA
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoA
GetSystemTimeAsFileTime
InterlockedDecrement
InterlockedIncrement
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
GetModuleFileNameW
CopyFileW
GetWindowsDirectoryW
VirtualAlloc
GetFileAttributesA
CreateIoCompletionPort
GlobalSize
VerifyVersionInfoW
GetStartupInfoW
WaitForSingleObject
GetShortPathNameA
GetCommandLineA
WriteFile
GetPrivateProfileStringA
WritePrivateProfileStringA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
SetErrorMode
GetExitCodeProcess
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
MulDiv
GetSystemDirectoryA
lstrlenA
lstrcpyA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
GetTempFileNameA
CreateFileA
RemoveDirectoryA
CreateProcessA
CreateThread
GlobalAlloc
GlobalLock
GlobalUnlock
GetDiskFreeSpaceA
GetUserDefaultLangID
GetTempPathA
GetWindowsDirectoryA
GlobalFree
lstrcpynA
CopyFileA
GetCurrentProcess
GetTickCount
GetModuleFileNameA
GetFileSize
Sleep
SetFileAttributesA
CreateDirectoryA
SetCurrentDirectoryA
lstrcatA
MoveFileA
GetFullPathNameA
SearchPathA
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
lstrlenW
DeleteFileW
FindFirstFileW
FindNextFileW
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
LoadLibraryExW
GetModuleHandleW
ExpandEnvironmentStringsW
lstrcmpW
lstrcmpiW
RemoveDirectoryW
GetVersion
GetSystemDirectoryW
GetVersionExW
lstrcpyW
OpenProcess
lstrcatW
GetTempFileNameW
CreateFileW
CreateProcessW
LoadLibraryW
GetDiskFreeSpaceW
lstrcpynW
GetCommandLineW
GetTempPathW
Sections
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mydata Size: 145KB - Virtual size: 22.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ