Static task
static1
Behavioral task
behavioral1
Sample
a47b360ae5c16ae70ba292f82897d9077618440ef68d30d2f63446da4d2e5b1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a47b360ae5c16ae70ba292f82897d9077618440ef68d30d2f63446da4d2e5b1f.exe
Resource
win10v2004-20221111-en
General
-
Target
a47b360ae5c16ae70ba292f82897d9077618440ef68d30d2f63446da4d2e5b1f
-
Size
93KB
-
MD5
0eef91ce5ad9e7f6e1c25c681fb34586
-
SHA1
0b96596cee958d52c928a8e82e69ad15eaf8fc92
-
SHA256
a47b360ae5c16ae70ba292f82897d9077618440ef68d30d2f63446da4d2e5b1f
-
SHA512
e08606e769c6c14177421fbe3e43ba479162ad8c5cf3a6248afc1da67f082d996314ed48ba8611e23494ba0a0994b9b807905fe5a5bb2332a426d80d9fb3c2b4
-
SSDEEP
1536:sADWm7KxPVuw7JU2epOu0KxAPDcOz1sBvHeUT1ANKLDBx:s+OHK4cOza5+UT2w
Malware Config
Signatures
Files
-
a47b360ae5c16ae70ba292f82897d9077618440ef68d30d2f63446da4d2e5b1f.exe windows x86
2fe343d6e25f3d56e8d60a878517ff8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleW
shell32
DragQueryFileW
DragAcceptFiles
ExtractIconW
SHGetFileInfoW
ShellExecuteW
DragFinish
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
CoInitialize
advapi32
RegSetValueW
RegSetValueExW
RegCreateKeyW
RegCreateKeyExW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
gdi32
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetBkColor
StretchDIBits
CreateFontW
GetCharWidthW
PatBlt
CreatePatternBrush
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
SetTextColor
CreateFontIndirectW
GetStockObject
CreateSolidBrush
GetDeviceCaps
GetClipBox
GetObjectW
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
GetTextMetricsW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetBkMode
SetMapMode
ExcludeClipRect
IntersectClipRect
DeleteObject
SelectClipRgn
SetBkColor
BitBlt
GetPixel
CreateRectRgn
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
shlwapi
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
kernel32
GetEnvironmentStrings
InterlockedIncrement
InterlockedDecrement
FreeEnvironmentStringsA
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetProcessId
SetMailslotInfo
CreateIoCompletionPort
CreateTimerQueue
GetNamedPipeInfo
FindFirstFileExW
GetProcessIoCounters
IsWow64Process
LocalCompact
ResetWriteWatch
PulseEvent
PeekNamedPipe
GetMailslotInfo
GetThreadContext
GetCurrentProcessId
PostQueuedCompletionStatus
SetLastError
DisableThreadLibraryCalls
GetFileTime
SetProcessShutdownParameters
RequestWakeupLatency
GetTapeStatus
WTSGetActiveConsoleSessionId
GetProcessVersion
SetFilePointerEx
SetStdHandle
FreeResource
GetCommModemStatus
GetVersion
ResetEvent
EncodeSystemPointer
RemoveVectoredExceptionHandler
ReleaseSemaphore
ReleaseMutex
GetFileSize
FreeLibrary
GetACP
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
GetLastError
CreateFileW
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpyW
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
MulDiv
lstrlenW
LocalFree
FormatMessageW
GlobalFree
GetCurrentThreadId
GetVersionExA
lstrcmpW
CompareStringW
GetVersionExW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GlobalGetAtomNameW
GetModuleHandleA
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetFileAttributesW
SetFileTime
GetTempFileNameW
GetFullPathNameW
GetDiskFreeSpaceW
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
lstrlenA
GetThreadLocale
FileTimeToSystemTime
SystemTimeToFileTime
WritePrivateProfileStringW
MoveFileW
DeleteFileW
GetStringTypeExW
lstrcmpiW
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetShortPathNameW
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
SetErrorMode
GetStartupInfoW
RtlUnwind
RaiseException
SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
VirtualAlloc
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
TerminateProcess
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
HeapSize
ExitProcess
Sleep
HeapReAlloc
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ