Static task
static1
Behavioral task
behavioral1
Sample
93af6ae04b1bb57535aafd9e2d3b15001191628bff22a19caabc203993f30da8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93af6ae04b1bb57535aafd9e2d3b15001191628bff22a19caabc203993f30da8.exe
Resource
win10v2004-20220812-en
General
-
Target
93af6ae04b1bb57535aafd9e2d3b15001191628bff22a19caabc203993f30da8
-
Size
218KB
-
MD5
6ad673c33d366517510114f3e60cc0c0
-
SHA1
c6a8bbfe4c4511d30cdb2a9495c35b9b76a6b6ed
-
SHA256
93af6ae04b1bb57535aafd9e2d3b15001191628bff22a19caabc203993f30da8
-
SHA512
5689a66d7034fc55445a59cfce0586a3506c4324c769522f7466788603aa09f7d09f76cddc3b47755e2eabf71c1594d1ec008a724aab86abc1b6f6d25d30381b
-
SSDEEP
3072:/BvRIxbjtDG5+UO1qxXDODvyYIDseYgmkdLdR6Wd8I:ZGxViO1qxXDODvyYIDseYgmk/RmI
Malware Config
Signatures
Files
-
93af6ae04b1bb57535aafd9e2d3b15001191628bff22a19caabc203993f30da8.exe windows x86
806d823699d84a3bef64eb4281972853
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
TlsAlloc
TlsFree
DeleteFileW
MoveFileW
GetWindowsDirectoryW
GetSystemDirectoryW
IsDBCSLeadByte
SetErrorMode
SizeofResource
LoadResource
LockResource
TlsSetValue
InterlockedExchangeAdd
GetFileSize
lstrcpyA
GetFullPathNameA
TlsGetValue
GetFileTime
SetFileTime
EnterCriticalSection
GetModuleFileNameA
GetProfileSectionW
GetProfileSectionA
CompareStringW
CreateFileW
CreateFileA
GetStringTypeExW
GetStringTypeExA
LocalReAlloc
GetACP
lstrcmpiW
MulDiv
GlobalHandle
GlobalSize
GlobalReAlloc
GlobalFlags
GlobalFree
GlobalAlloc
SetFilePointer
CloseHandle
WaitForSingleObject
ReadFile
IsBadWritePtr
FindAtomA
GetSystemDefaultLangID
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
GetLocaleInfoW
IsBadReadPtr
LocalLock
WideCharToMultiByte
GetSystemDefaultLCID
LeaveCriticalSection
FindAtomW
GetProfileIntA
QueryPerformanceCounter
InterlockedExchange
UnhandledExceptionFilter
FindFirstFileW
GetFileAttributesW
LocalFree
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
GetFileType
WriteConsoleW
SetLastError
GetConsoleOutputCP
GetLastError
lstrlenW
GetModuleHandleW
lstrcpynW
GetModuleFileNameW
GetModuleHandleA
GetVersion
GlobalLock
GlobalUnlock
FreeLibrary
LocalAlloc
GetExitCodeProcess
OutputDebugStringW
CreateDirectoryExW
RemoveDirectoryW
ExitThread
WriteFile
user32
GetSysColor
GetKeyState
PtInRect
GetWindowRect
ScreenToClient
GetCursorPos
DrawFocusRect
UpdateWindow
SetWindowPos
InvalidateRect
InflateRect
EndPaint
BeginPaint
MoveWindow
ClientToScreen
CreateWindowExA
ReleaseDC
GetDC
IsWindowUnicode
ActivateKeyboardLayout
CopyRect
InvertRect
ReleaseCapture
GetAsyncKeyState
SetCapture
TrackPopupMenu
RegisterClipboardFormatA
DestroyMenu
SetFocus
DestroyCaret
GetFocus
IsWindowVisible
SetScrollRange
SetScrollPos
HideCaret
GetDoubleClickTime
RegisterClassA
UnregisterClassW
CharUpperBuffW
CharLowerA
GetKeyboardLayoutList
GetKeyboardLayout
LoadCursorA
LoadBitmapW
LoadBitmapA
GetClassLongW
GetClassLongA
DefWindowProcW
DefWindowProcA
wvsprintfA
EnableScrollBar
ShowScrollBar
ShowCaret
CharUpperW
GetClipboardData
GetClipboardOwner
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
IsClipboardFormatAvailable
GetCaretPos
GetCapture
IsChild
GetForegroundWindow
WindowFromPoint
SystemParametersInfoW
GetDesktopWindow
IsWindow
GetWindow
ScrollWindowEx
KillTimer
SetCaretPos
DialogBoxParamW
LoadStringW
WinHelpW
GetDlgItem
SetWindowLongW
GetWindowLongW
GetParent
EnableWindow
DrawFrameControl
SetCursor
DestroyWindow
UnregisterClassA
WindowFromDC
GetCursor
advapi32
DeregisterEventSource
RegQueryValueExA
RegEnumKeyExA
RegQueryValueExW
ReportEventA
ole32
ReleaseStgMedium
msvcrt
malloc
fgetwc
atol
sprintf
wcsncpy
wcslen
memmove
fwprintf
vswprintf
vfwprintf
free
fprintf
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ