Static task
static1
Behavioral task
behavioral1
Sample
a282f3ad32b8288580df908cd5e0247fc3157ddcb8b09a2aec18500b53be511a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a282f3ad32b8288580df908cd5e0247fc3157ddcb8b09a2aec18500b53be511a.exe
Resource
win10v2004-20220812-en
General
-
Target
a282f3ad32b8288580df908cd5e0247fc3157ddcb8b09a2aec18500b53be511a
-
Size
5.8MB
-
MD5
d4d16b16d9d2ab779d542ce3a373d51f
-
SHA1
3eaf75a32ccbe51de8421b0be48e32c10782d016
-
SHA256
a282f3ad32b8288580df908cd5e0247fc3157ddcb8b09a2aec18500b53be511a
-
SHA512
3d649f8288726987b1d725a4c755cdec75373975398188b368c5ccfa0d09e92965ac7025ec028e67f0a6fc69bfbefd1ff3f47f28c05b15415d907f54dcf29d2a
-
SSDEEP
98304:9FF9ZVr8wz6KdlMnt27wTd+tMXX23odyGeu1hFAf6zC3mhUtd5MHBWORz3Qcpl+u:3F9ZVjzRMt27wTEIXeT5u1T+mhId5MHz
Malware Config
Signatures
Files
-
a282f3ad32b8288580df908cd5e0247fc3157ddcb8b09a2aec18500b53be511a.exe windows x86
b546b6a9bf8bd04dd84d3f2d62981967
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
GetProcessHeap
HeapAlloc
LoadLibraryA
CreateMutexA
CloseHandle
CreateFileW
FileTimeToLocalFileTime
GetLastError
DuplicateHandle
GetProcAddress
InterlockedCompareExchange
GetModuleHandleA
GetVersionExA
GetModuleHandleExW
VirtualProtect
ResumeThread
LocalFileTimeToFileTime
Sleep
WaitForSingleObjectEx
InitializeCriticalSection
GetLocalTime
GetCurrentProcess
HeapFree
FileTimeToSystemTime
VirtualFree
GetTickCount
VirtualAlloc
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwind
GetCommandLineA
InterlockedDecrement
ExitProcess
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetCurrentThreadId
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
advapi32
RegOpenKeyW
RegQueryInfoKeyA
RegCreateKeyW
RegEnumValueW
RegOpenKeyExA
RegCreateKeyExW
RegEnumValueA
RegQueryValueW
user32
PostMessageA
UpdateWindow
SendMessageA
LoadIconA
RedrawWindow
DispatchMessageA
GetWindowRect
TrackPopupMenu
RegisterClassExA
LoadIconW
CreatePopupMenu
PostQuitMessage
RegisterClassExW
RegisterWindowMessageA
SetForegroundWindow
GetLastInputInfo
PeekMessageW
GetDlgItem
GetSystemMetrics
DispatchMessageW
GetCursorPos
GetMessageA
CreateWindowExW
ShowWindow
SetWindowPos
EnumWindows
MessageBoxW
MsgWaitForMultipleObjects
PostMessageW
SendMessageW
AppendMenuW
GetClientRect
GetParent
RegisterWindowMessageW
Sections
.text Size: 433KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 398KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ