Static task
static1
Behavioral task
behavioral1
Sample
a7e0192ea6c81ce23f670d39389cdf4d70c14759239d0ff7865bc8956533d9b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a7e0192ea6c81ce23f670d39389cdf4d70c14759239d0ff7865bc8956533d9b3.exe
Resource
win10v2004-20220812-en
General
-
Target
a7e0192ea6c81ce23f670d39389cdf4d70c14759239d0ff7865bc8956533d9b3
-
Size
220KB
-
MD5
713bca6eb6c59be13c7ed47677ba6264
-
SHA1
772520ffae51dc7a9245d2159b29daf3b70331d4
-
SHA256
a7e0192ea6c81ce23f670d39389cdf4d70c14759239d0ff7865bc8956533d9b3
-
SHA512
b21013a1731cf145a33149c429241a3dc429e4546394d10666e51d63934c0ced1d28437132ec5d01dec4e5ffcf3a63298c832a897041a6c84e102d76dcf8f1c8
-
SSDEEP
3072:wq7Htqj5AUA0nPuIdcknb/0V3oKXwp6B5JP0:PtQ1PuickT0I6B5Z
Malware Config
Signatures
Files
-
a7e0192ea6c81ce23f670d39389cdf4d70c14759239d0ff7865bc8956533d9b3.exe windows x86
7c8bf8b3669964581e0e8c459abe2ab8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
HeapDestroy
DeleteCriticalSection
ExitProcess
CreateThread
GetCurrentProcess
GetCommandLineA
GetModuleHandleW
LoadLibraryW
GetProcAddress
GetCommandLineW
GetSystemTimeAsFileTime
InterlockedIncrement
GetStartupInfoA
GetStartupInfoW
GetProcessHeap
GetModuleHandleA
HeapAlloc
LocalAlloc
QueryPerformanceCounter
GetVersionExA
GetStartupInfoW
GetCommandLineW
GetModuleHandleA
MultiByteToWideChar
UnhandledExceptionFilter
GetProcessHeap
CreateThread
GetModuleHandleW
HeapAlloc
WaitForSingleObject
WideCharToMultiByte
GetSystemTimeAsFileTime
GetACP
WriteFile
EnterCriticalSection
HeapDestroy
WriteFile
WaitForSingleObject
lstrcmpiW
GetProcAddress
GetCommandLineA
VirtualFree
SetUnhandledExceptionFilter
LeaveCriticalSection
SetFilePointer
ExitProcess
ExitProcess
DeleteCriticalSection
FormatMessageW
GetModuleHandleA
WaitForSingleObject
GetCommandLineA
QueryPerformanceCounter
InterlockedDecrement
InitializeCriticalSection
CloseHandle
EnterCriticalSection
GetCurrentProcessId
GetACP
lstrcpyW
ExitProcess
lstrcmpiW
WaitForSingleObject
GetStartupInfoA
GetStartupInfoW
GetModuleHandleA
TerminateProcess
DeleteCriticalSection
user32
PostQuitMessage
SendMessageA
CreateDialogParamW
CopyRect
RegisterClassExW
GetWindowRect
GetMenu
SetCapture
TranslateMessage
ShowWindow
IsWindowVisible
CreateWindowExW
ReleaseCapture
InvalidateRect
DestroyWindow
GetWindowLongW
LoadStringA
DrawTextW
SendMessageA
wsprintfW
PostQuitMessage
LoadCursorW
SetCapture
GetFocus
LoadAcceleratorsW
SetFocus
LoadImageW
MoveWindow
SetWindowTextW
LoadAcceleratorsW
wsprintfA
ShowWindow
SendMessageW
SetWindowLongW
EnableWindow
PostQuitMessage
IsIconic
PostMessageW
LoadAcceleratorsW
DestroyIcon
ReleaseDC
ReleaseDC
SendMessageA
CreateDialogParamW
DispatchMessageW
GetCursorPos
EndDialog
GetDesktopWindow
GetWindowTextW
WinHelpW
GetDC
RegisterClassExW
EndDialog
SendDlgItemMessageW
GetDlgItem
EnableWindow
DispatchMessageW
SetRect
SystemParametersInfoW
OffsetRect
CheckDlgButton
LoadMenuW
CheckDlgButton
GetWindowRect
DispatchMessageA
EnableMenuItem
GetFocus
SetForegroundWindow
BeginPaint
GetWindowLongW
SetForegroundWindow
IsIconic
MoveWindow
GetKeyState
OffsetRect
LoadStringA
GetParent
MessageBeep
GetDC
LoadIconW
wsprintfW
GetWindowTextW
SendDlgItemMessageW
GetWindowRect
EndPaint
SetCursor
DestroyWindow
GetWindow
DrawTextW
TranslateMessage
ShowWindow
GetDC
LoadMenuW
SetTimer
FindWindowW
gdi32
CreateFontIndirectW
SetTextColor
CreateFontIndirectW
SetBkColor
LineTo
CreateCompatibleDC
DeleteDC
DeleteDC
CreateCompatibleDC
SelectObject
ExtTextOutW
CreateCompatibleDC
MoveToEx
MoveToEx
SelectObject
SetBkMode
StretchBlt
CreateSolidBrush
TextOutW
GetTextMetricsW
SetTextColor
DeleteDC
GetTextExtentPoint32W
SetBkColor
CreateFontIndirectW
LineTo
DeleteDC
CreateBitmap
GetStockObject
DeleteDC
DeleteDC
DeleteDC
ExtTextOutW
SetBkMode
CreateSolidBrush
CreateCompatibleBitmap
CreateFontIndirectW
SetTextColor
CreateSolidBrush
GetTextMetricsW
ExtTextOutW
TextOutW
SetTextColor
SelectObject
LineTo
StretchBlt
SetBkMode
BitBlt
GetTextExtentPoint32W
PatBlt
SetTextColor
SetTextColor
SelectObject
LineTo
StretchBlt
CreateSolidBrush
SetTextColor
DeleteObject
LineTo
PatBlt
GetStockObject
GetDeviceCaps
TextOutW
CreateCompatibleDC
CreateCompatibleDC
GetStockObject
GetStockObject
CreateFontIndirectW
GetDeviceCaps
DeleteObject
CreateFontIndirectW
PatBlt
GetObjectW
CreateBitmap
BitBlt
ExtTextOutW
GetTextExtentPoint32W
SetBkMode
GetTextExtentPoint32W
DeleteDC
GetObjectW
SetBkColor
LineTo
GetTextMetricsW
DeleteDC
SetBkColor
CreateCompatibleDC
CreateCompatibleDC
PatBlt
TextOutW
CreateSolidBrush
LineTo
SetTextColor
SetBkMode
GetObjectW
LineTo
DeleteObject
TextOutW
CreateCompatibleBitmap
PatBlt
SetBkColor
StretchBlt
CreateSolidBrush
GetObjectW
BitBlt
GetObjectW
GetTextExtentPoint32W
SelectObject
LineTo
SetTextColor
CreateCompatibleBitmap
GetObjectW
LineTo
CreateFontIndirectW
ExtTextOutW
DeleteObject
DeleteObject
SetBkMode
MoveToEx
StretchBlt
TextOutW
CreateCompatibleBitmap
PatBlt
GetDeviceCaps
CreateCompatibleDC
SetBkMode
GetDeviceCaps
SetBkMode
CreateBitmap
SetBkColor
PatBlt
SetBkColor
StretchBlt
SetTextColor
PatBlt
GetTextMetricsW
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
GetTextMetricsW
CreateCompatibleDC
SelectObject
BitBlt
Sections
.idata Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE