Static task
static1
Behavioral task
behavioral1
Sample
a75e73e1044bafad52479a696066dfc5d418a8c1cf1c1ab201f91404689e49ce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a75e73e1044bafad52479a696066dfc5d418a8c1cf1c1ab201f91404689e49ce.exe
Resource
win10v2004-20220901-en
General
-
Target
a75e73e1044bafad52479a696066dfc5d418a8c1cf1c1ab201f91404689e49ce
-
Size
360KB
-
MD5
1050e85cdd5982a93eb91474f79bdb72
-
SHA1
0157cfec021256750d5473835172f4296fb281db
-
SHA256
a75e73e1044bafad52479a696066dfc5d418a8c1cf1c1ab201f91404689e49ce
-
SHA512
37c4996063175c49c97efc16a1a30811b8ecb72111d08be14386bbfeeb1b16f923d2bcb869c03a4586678fef94d84a8750dc493aa2f404c43de67cdcf80d92e2
-
SSDEEP
6144:17IKp+PmbofjMuXRenBW+WQVcHlT0tDnlCbdhz6n6NJX:R/orMuXOBWT9wodhz6nMX
Malware Config
Signatures
Files
-
a75e73e1044bafad52479a696066dfc5d418a8c1cf1c1ab201f91404689e49ce.exe windows x86
2980905b1e014ad0c543a5cafd926f9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileAttributesA
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapFree
SetEnvironmentVariableA
SetCurrentDirectoryA
GetProcessHeap
RtlUnwind
RaiseException
ExitProcess
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
WritePrivateProfileStringA
CloseHandle
GlobalAddAtomA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GetThreadLocale
GlobalGetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GlobalFlags
InterlockedIncrement
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
SetErrorMode
GetModuleFileNameA
InterlockedDecrement
GetModuleFileNameW
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
GetModuleHandleA
GetCommandLineA
CreateProcessA
SizeofResource
LockResource
LoadResource
FindResourceA
WaitForSingleObject
CompareStringA
MultiByteToWideChar
InterlockedExchange
lstrlenA
WideCharToMultiByte
FreeLibrary
GetVersion
LoadLibraryA
GetLastError
UnhandledExceptionFilter
GetProcAddress
user32
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
UnregisterClassA
CopyRect
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
GetWindowRect
GetClassNameA
PtInRect
GetWindowTextA
GetFocus
GetParent
SetWindowPos
SendMessageA
EnableWindow
GetSubMenu
IsWindowEnabled
ShowWindow
SetWindowLongA
GetDlgCtrlID
IsWindow
SetWindowTextA
GetWindowLongA
DestroyMenu
GetClassInfoA
GetMenuItemCount
GetMenuItemID
GetMenuState
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetDC
ReleaseDC
GetDlgItem
GetWindow
LoadCursorA
GetSystemMetrics
GetSysColorBrush
PostMessageA
PostQuitMessage
UnhookWindowsHookEx
GetSysColor
gdi32
DeleteDC
PtVisible
CreateBitmap
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
GetDeviceCaps
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
RectVisible
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 192KB - Virtual size: 1.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE