Static task
static1
Behavioral task
behavioral1
Sample
a1a61a550d565bf3407dcc2a5613a5f594882270d753da05bab9c8d51bb371f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1a61a550d565bf3407dcc2a5613a5f594882270d753da05bab9c8d51bb371f3.exe
Resource
win10v2004-20220812-en
General
-
Target
a1a61a550d565bf3407dcc2a5613a5f594882270d753da05bab9c8d51bb371f3
-
Size
320KB
-
MD5
9814220b5611eb4b1bab473b894ae039
-
SHA1
b0fe592b5485063becd5ead3d063c892ee48976d
-
SHA256
a1a61a550d565bf3407dcc2a5613a5f594882270d753da05bab9c8d51bb371f3
-
SHA512
38b698afdc69694c37fe24199f8b82ea04568f7d9d4f96554a4d55e4643a0513f97adf7ccac6a5e8f5ce8a3f931e02d96289deea02d1a180a7e46ee15a9297d7
-
SSDEEP
6144:u3o3cWzfvzaTSVpe8FfNoqLMgqZ7y+lAhc:u3osOrNoqIgqZ79
Malware Config
Signatures
Files
-
a1a61a550d565bf3407dcc2a5613a5f594882270d753da05bab9c8d51bb371f3.exe windows x86
e77930059c670c166e30351e4922edb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
CloseHandle
GetTickCount
HeapSize
EnterCriticalSection
OpenSemaphoreW
OpenMutexA
VirtualFree
GetConsoleOutputCP
SetLastError
GetStringTypeW
GetFileAttributesExW
WriteFile
GetFileType
CompareStringW
GetSystemTime
GetCurrentProcess
GetStartupInfoW
VirtualProtect
SetEnvironmentVariableA
LCMapStringA
QueryPerformanceCounter
GetEnvironmentStringsW
GetVolumeInformationA
CreateFileA
UnhandledExceptionFilter
LeaveCriticalSection
GetCurrentThreadId
GetLongPathNameW
GetModuleFileNameW
SetThreadIdealProcessor
VirtualQuery
GlobalAddAtomW
RemoveDirectoryW
GetModuleFileNameA
GetProcAddress
InitializeCriticalSection
SetStdHandle
GetStartupInfoA
HeapFree
GetLogicalDrives
WideCharToMultiByte
TlsAlloc
GetCurrentThread
MapViewOfFile
FreeLibraryAndExitThread
GetStringTypeA
LCMapStringW
CreateMutexA
TlsSetValue
GetSystemDefaultLCID
GetLastError
CreateFileW
SetConsoleTitleW
HeapDestroy
GetCommandLineA
OpenFileMappingW
ReadFile
GetModuleHandleA
GetCurrentProcessId
FreeEnvironmentStringsA
FindNextChangeNotification
FreeEnvironmentStringsW
GetCommandLineW
ExitProcess
HeapAlloc
InterlockedIncrement
GetTimeZoneInformation
SetHandleCount
MultiByteToWideChar
VirtualAlloc
ReadConsoleOutputCharacterW
GetStdHandle
TerminateProcess
GetUserDefaultLCID
GlobalDeleteAtom
TlsGetValue
FlushFileBuffers
GetCPInfo
SetFilePointer
GetNumberFormatW
FlushInstructionCache
TlsFree
InterlockedExchange
GetLocalTime
IsBadWritePtr
LoadLibraryA
DeleteAtom
GetVersion
GetEnvironmentStrings
InterlockedDecrement
GetSystemTimeAsFileTime
GetPrivateProfileSectionNamesA
CompareStringA
GetWindowsDirectoryA
RtlUnwind
HeapReAlloc
DeleteCriticalSection
user32
GetDlgItem
CreateWindowExW
IntersectRect
CloseDesktop
RegisterClassExA
ShowWindow
CreatePopupMenu
OemToCharA
GetClipboardData
BeginPaint
DestroyWindow
DdeAccessData
SetCapture
DefWindowProcW
EmptyClipboard
GetWindowWord
EnableScrollBar
IsWindowEnabled
CreateMDIWindowA
CharToOemW
CharToOemA
GetMenuBarInfo
GetMessageA
GetUpdateRect
EnumDesktopsA
GetCaretBlinkTime
EnumThreadWindows
RegisterClassA
ShowOwnedPopups
CreateDialogIndirectParamW
UnregisterClassA
DdePostAdvise
LoadCursorW
GetSystemMetrics
EnumPropsW
MessageBoxW
GetClassInfoExA
CharUpperW
VkKeyScanExW
comctl32
ImageList_DragShowNolock
InitCommonControlsEx
ImageList_GetIcon
Sections
.text Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ