Static task
static1
Behavioral task
behavioral1
Sample
ace4b27226f6c70aa1f25842dcbb6d45fa84cbe8b91cfed84cba6fd6ee93f25f.exe
Resource
win7-20221111-en
General
-
Target
ace4b27226f6c70aa1f25842dcbb6d45fa84cbe8b91cfed84cba6fd6ee93f25f
-
Size
600KB
-
MD5
0567dd10e61e4ebb761e303294eba6d8
-
SHA1
a38fe475ec7ec5ce2ffa6693ee972b186bc0a7eb
-
SHA256
ace4b27226f6c70aa1f25842dcbb6d45fa84cbe8b91cfed84cba6fd6ee93f25f
-
SHA512
3041da69715dc764f16ed9017b1d121081c8d54866a07ee39c33e6f10ae97da47ea3a74f9ea965d0ae71931064e1481631a9f621ec36b66fc2bf33514700e795
-
SSDEEP
12288:OfoEIyN58FKzJleFLdeAjBFWaY9eH5xrjwHbCEf82YvXIDPttd:OfoEIyN58FK9lM4A9FWKnH0b582mX4Vt
Malware Config
Signatures
Files
-
ace4b27226f6c70aa1f25842dcbb6d45fa84cbe8b91cfed84cba6fd6ee93f25f.exe windows x86
33fa7e83794068c3a3bf0990a3362ef7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadModule
_lwrite
MoveFileA
WideCharToMultiByte
ProcessIdToSessionId
CreateIoCompletionPort
IsValidLanguageGroup
FindFirstFileA
WriteProfileSectionW
FatalAppExitA
CreateEventW
GetCompressedFileSizeA
GetTimeFormatW
CallNamedPipeA
CompareFileTime
GetLogicalDriveStringsA
GetThreadPriorityBoost
CreateEventA
GetCurrentDirectoryA
FreeLibraryAndExitThread
GetVolumeNameForVolumeMountPointA
CreateNamedPipeA
WriteProfileSectionA
GetCurrencyFormatA
GetThreadLocale
CreateDirectoryW
FatalExit
lstrcpyA
SetCurrentDirectoryA
GetProcessWorkingSetSize
GetCommMask
GetProcessHeaps
GetCurrentProcessId
GlobalHandle
IsBadHugeWritePtr
GetPrivateProfileSectionNamesW
CreateDirectoryExA
SetThreadLocale
GetLongPathNameW
OpenFileMappingA
LockFile
GetVolumeInformationW
GetVersionExA
PrepareTape
ReadFileScatter
PeekNamedPipe
GetFileAttributesW
WaitForDebugEvent
EnumDateFormatsExA
SetTimeZoneInformation
SearchPathA
GetCommTimeouts
GetQueuedCompletionStatus
SetFileApisToANSI
GetBinaryTypeA
CreateTimerQueue
UnmapViewOfFile
TlsAlloc
DeleteVolumeMountPointA
GetSystemWindowsDirectoryW
ExpandEnvironmentStringsW
GlobalAddAtomW
GetFileSize
SystemTimeToTzSpecificLocalTime
EnumResourceLanguagesW
IsValidCodePage
FindResourceExW
FindNextChangeNotification
SetEnvironmentVariableW
GlobalGetAtomNameW
SetHandleCount
DosDateTimeToFileTime
WaitForSingleObjectEx
lstrcpynW
LockResource
EnumLanguageGroupLocalesW
BackupSeek
GetPrivateProfileSectionW
RtlUnwind
GetFullPathNameA
DeviceIoControl
GetFileAttributesA
GetTempPathW
CompareStringW
EnumResourceLanguagesA
RemoveDirectoryW
FreeUserPhysicalPages
FreeEnvironmentStringsA
GetProcessVersion
GetSystemTimeAdjustment
GetDateFormatW
CreateMailslotA
QueueUserWorkItem
SizeofResource
SetVolumeMountPointW
lstrcpynA
GetShortPathNameA
GetCurrencyFormatW
FreeLibrary
FindFirstVolumeMountPointA
Process32NextW
GetStdHandle
SetupComm
GetNamedPipeHandleStateA
SetMailslotInfo
GetDevicePowerState
CreateFileA
EndUpdateResourceA
GetVersionExW
CreateFileMappingA
GetEnvironmentVariableW
ContinueDebugEvent
GetPriorityClass
GetLogicalDrives
GetSystemDefaultLCID
FreeEnvironmentStringsW
ReplaceFileA
GetSystemTimeAsFileTime
CreateJobObjectW
_llseek
shlwapi
PathAppendA
user32
DestroyAcceleratorTable
DialogBoxIndirectParamA
GetWindowWord
VkKeyScanExA
DrawCaption
EqualRect
EnumThreadWindows
CloseWindowStation
CreateCursor
BeginPaint
DragObject
GetNextDlgGroupItem
EnumPropsW
CharNextExA
ExcludeUpdateRgn
OemKeyScan
LoadAcceleratorsW
DefMDIChildProcA
CreateDesktopA
GetClipCursor
SystemParametersInfoA
WaitMessage
DrawStateW
GetProcessDefaultLayout
DdeUninitialize
DrawFrame
GetMessageExtraInfo
Sections
.text Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 225KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ