Static task
static1
Behavioral task
behavioral1
Sample
af40d0de72e39d6cd80cb4be7bfecf02436370084e951642b99e9644203030aa.exe
Resource
win7-20220812-en
General
-
Target
af40d0de72e39d6cd80cb4be7bfecf02436370084e951642b99e9644203030aa
-
Size
365KB
-
MD5
7f1a21d3df2d28191119e4d974143419
-
SHA1
bef7982df81fde216e1ff9a400e0599b2d6121a2
-
SHA256
af40d0de72e39d6cd80cb4be7bfecf02436370084e951642b99e9644203030aa
-
SHA512
a7df7a0be0e904e8f2176c8f1a6d1dfe27e5d14397419ddd214867881362ee875bad2852d3e483f18d54656163bd7b776ee732b85b4453292fe4905e7d221fc0
-
SSDEEP
3072:U1agxibpFHcsMcWYFxzkZdmVVUD8VQknr4B0FpvWeTCAb8dqa0fP9p0wQHHMoI8B:pgxgpysfFxw/mUQVQnC8eb8dqfX6MiO
Malware Config
Signatures
Files
-
af40d0de72e39d6cd80cb4be7bfecf02436370084e951642b99e9644203030aa.exe windows x86
325af23fa819ff5b7871428e4a9aeac0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
EnumDateFormatsA
CreateToolhelp32Snapshot
CloseHandle
GetCurrentProcessId
GetProcessHeap
SetEndOfFile
HeapSize
HeapReAlloc
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointer
LoadLibraryW
GetStringTypeW
Process32Next
GetSystemTimeAsFileTime
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
RtlUnwind
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
GetStdHandle
WriteFile
FindClose
lstrcmpiA
GetLastError
FindFirstFileA
GlobalUnlock
SetConsoleTitleA
MultiByteToWideChar
ReadFile
TerminateProcess
HeapCreate
Sleep
GlobalAlloc
GetConsoleTitleA
GetTickCount
CreateFileA
GlobalLock
Process32First
GetCurrentProcess
HeapAlloc
lstrlenA
ExitProcess
GetProcAddress
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
GetFileSize
LCMapStringW
DecodePointer
TlsSetValue
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
CreateFileW
user32
MoveWindow
CopyRect
GetDialogBaseUnits
DestroyIcon
LoadCursorA
FindWindowA
DestroyWindow
SetCursor
DdeSetQualityOfService
GetDlgItemInt
GetWindowRect
wsprintfA
GetClientRect
GetMenuCheckMarkDimensions
GetWindowTextLengthA
CreateIconIndirect
GetIconInfo
GetDC
SetDlgItemInt
OffsetRect
GetWindowTextA
SetWindowLongA
MessageBoxA
GetWindowLongA
GetDlgItem
EndDialog
GetDesktopWindow
CheckDlgButton
IsDlgButtonChecked
CreateDialogParamW
IsWindow
SetWindowTextA
gdi32
MoveToEx
BitBlt
LineTo
SetTextColor
DeleteDC
StretchBlt
SetBkColor
CreateBitmap
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
SetDCPenColor
CreateBitmapIndirect
CreateICA
GetObjectA
GetStockObject
PatBlt
advapi32
CryptExportKey
ole32
CoInitializeEx
CreateStreamOnHGlobal
CLSIDFromString
CoUninitialize
oleaut32
OleSavePictureFile
OleLoadPicture
comctl32
ImageList_GetIcon
dbghelp
EnumerateLoadedModules
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ