Static task
static1
Behavioral task
behavioral1
Sample
ace71b64f13b1404726137d645cf8949441311ba48ed45fb06240c895f6da68b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ace71b64f13b1404726137d645cf8949441311ba48ed45fb06240c895f6da68b.exe
Resource
win10v2004-20220812-en
General
-
Target
ace71b64f13b1404726137d645cf8949441311ba48ed45fb06240c895f6da68b
-
Size
700KB
-
MD5
213be742f4b51c445add268bc87bc21f
-
SHA1
f38f6dfa57a4d508c0f9c86cf26e1faba8919a84
-
SHA256
ace71b64f13b1404726137d645cf8949441311ba48ed45fb06240c895f6da68b
-
SHA512
c6687265ac56c7a7a3a72d2a38d31b1de9e285b7f7a582d736bb4b99f6f1355e1cd932df090449d31b1b266bd7c1a85cc4ad671328227e414b97698e5c42c523
-
SSDEEP
12288:xPaPUnR65Sa44S5zJKWdGGIBOX7LzuWLGAOB0BIbdwVrGXOgBgNjb:xPamUOKMGdBu3sAA+gdaKXBM
Malware Config
Signatures
Files
-
ace71b64f13b1404726137d645cf8949441311ba48ed45fb06240c895f6da68b.exe windows x86
ecb8847541f7b581d53ea327ac518a67
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadExecutionState
LockFile
GetDevicePowerState
GlobalFree
InterlockedCompareExchange
GetSystemDefaultUILanguage
GetFileAttributesExA
GetPrivateProfileSectionA
SetCalendarInfoA
GetLogicalDriveStringsA
GetCurrentThreadId
SetCalendarInfoW
GetCurrencyFormatW
GlobalUnlock
DeleteVolumeMountPointW
GlobalLock
GetCompressedFileSizeA
CreateMailslotW
BackupSeek
CreatePipe
Process32NextW
RtlZeroMemory
FreeUserPhysicalPages
CancelWaitableTimer
DeleteTimerQueueEx
GetSystemDefaultLangID
SetThreadIdealProcessor
SetThreadPriority
OpenFileMappingW
IsValidLocale
WaitForSingleObjectEx
GetProcessAffinityMask
GetProcessPriorityBoost
GetCPInfo
LocalCompact
HeapAlloc
EnumCalendarInfoW
SetCurrentDirectoryA
SetTimerQueueTimer
GetThreadLocale
WritePrivateProfileSectionA
VerifyVersionInfoW
MultiByteToWideChar
CreateMutexW
RtlUnwind
GetProcessVersion
GetFileType
IsBadHugeWritePtr
lstrlenW
SetUnhandledExceptionFilter
GetOEMCP
ReplaceFileW
GetSystemDefaultLCID
OpenSemaphoreW
user32
EnumDisplayMonitors
CopyAcceleratorTableW
LoadBitmapA
CheckMenuItem
DlgDirListComboBoxA
OpenInputDesktop
SubtractRect
CharPrevExA
DestroyAcceleratorTable
PostThreadMessageW
GetClipCursor
ValidateRgn
CharLowerW
TranslateMessage
LookupIconIdFromDirectoryEx
SendMessageA
CharToOemW
GetKeyNameTextA
DdeConnectList
InsertMenuA
DdeAbandonTransaction
GetDlgItem
SetWindowsHookW
GetLastActivePopup
IsZoomed
DialogBoxIndirectParamA
GetWindowInfo
DdeQueryNextServer
UnregisterDeviceNotification
CreateAcceleratorTableW
SetKeyboardState
GetSubMenu
ToUnicode
ToAsciiEx
CharPrevA
InvalidateRect
MonitorFromPoint
UnhookWinEvent
GetCaretBlinkTime
LoadCursorFromFileA
SetSysColors
GetMessageExtraInfo
HiliteMenuItem
SetDoubleClickTime
DdeUninitialize
SetDebugErrorLevel
DeferWindowPos
GetAsyncKeyState
SendNotifyMessageW
IsDialogMessageA
EmptyClipboard
CallMsgFilterA
DefFrameProcW
GetMenuInfo
OpenDesktopA
GetClassInfoExA
ScrollWindow
DdeInitializeA
SwitchDesktop
wvsprintfA
GetWindowRect
EnableWindow
UnregisterClassW
wvsprintfW
IsCharAlphaNumericW
GetKeyboardLayoutNameA
EnumDesktopsA
ExitWindowsEx
ReuseDDElParam
EnumPropsExA
FreeDDElParam
SetForegroundWindow
SetLastErrorEx
RegisterWindowMessageW
VkKeyScanA
MoveWindow
SetScrollPos
CreateIconFromResource
SetFocus
GetWindowLongW
RegisterWindowMessageA
DestroyIcon
VkKeyScanExW
SetCaretBlinkTime
GetDlgCtrlID
GetGUIThreadInfo
ArrangeIconicWindows
GetWindowModuleFileNameW
GetDlgItemInt
DefMDIChildProcW
DdeSetQualityOfService
CharNextExA
VkKeyScanW
OpenIcon
MessageBoxExW
IsClipboardFormatAvailable
MenuItemFromPoint
GetMenu
CharPrevW
GetMenuItemInfoW
BeginPaint
PostMessageW
DlgDirListA
SendMessageTimeoutA
GetKeyboardLayout
TrackPopupMenu
SetMessageQueue
GetMessagePos
RegisterShellHookWindow
GetWindowModuleFileNameA
GetThreadDesktop
SwitchToThisWindow
WindowFromDC
ActivateKeyboardLayout
EnumDesktopWindows
GetActiveWindow
FindWindowExA
GetMenuItemInfoA
GetMenuState
EnumClipboardFormats
LookupIconIdFromDirectory
MessageBoxIndirectW
FindWindowW
GetMenuItemCount
GetKeyboardLayoutNameW
SetDlgItemInt
DdeQueryStringA
CallWindowProcW
CharLowerBuffW
MapVirtualKeyA
GetClassLongA
SendMessageW
GetMenuContextHelpId
GetCursorPos
Sections
.text Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 254KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ