Static task
static1
Behavioral task
behavioral1
Sample
725920737513ff5f90f29b89f7e513c65027a773586ff1473e61506243e52be6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
725920737513ff5f90f29b89f7e513c65027a773586ff1473e61506243e52be6.exe
Resource
win10v2004-20220812-en
General
-
Target
725920737513ff5f90f29b89f7e513c65027a773586ff1473e61506243e52be6
-
Size
995KB
-
MD5
a0f9008c51a9b89910539bed499b4610
-
SHA1
4ed662b3d1cc45f258c18d5a061518a61656d8ef
-
SHA256
725920737513ff5f90f29b89f7e513c65027a773586ff1473e61506243e52be6
-
SHA512
27846429589b72d5b264437ef607847609cc86df9f9a7878f38edfd7536e56eb8ade3b6f07debee1b92aa4812d08a7c3e5f98b98042badcba5c3241bd005bb31
-
SSDEEP
6144:22w6rbBCbBwb/nM6HujxlCH4Lsq6REfnoJUa7kWTiJSZAOr4qXsM:2ogIMblCHihfnoT4W2JMN/p
Malware Config
Signatures
Files
-
725920737513ff5f90f29b89f7e513c65027a773586ff1473e61506243e52be6.exe windows x86
5bb9d9b4623e9467c93a09931de20bb9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CloseHandle
CompareStringA
CopyFileA
CreateDirectoryA
CreateFileA
DeleteFileA
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
FindNextFileA
FormatMessageA
FreeLibrary
GetCurrentProcess
GetEnvironmentVariableA
GetFileAttributesA
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetProcAddress
GetProcessPriorityBoost
GetShortPathNameA
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
IsBadWritePtr
IsDBCSLeadByte
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
LocalReAlloc
MoveFileA
MoveFileExA
OpenJobObjectW
SetFileAttributesA
SetFilePointer
SwitchToFiber
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
CompareFileTime
ConnectNamedPipe
CreateEventW
CreateFileMappingW
CreateFileW
CreateJobObjectW
CreateMutexW
DisableThreadLibraryCalls
DnsHostnameToComputerNameW
DuplicateHandle
EnumLanguageGroupLocalesA
ExpandEnvironmentStringsW
FileTimeToSystemTime
GetCurrentProcessId
GetDateFormatW
GetFileInformationByHandle
GetFileType
GetFullPathNameA
GetModuleFileNameW
GetProcessHeap
GetProcessTimes
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTickCount
GetVersion
GlobalMemoryStatusEx
HeapDestroy
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
MapViewOfFile
OpenMutexW
OpenProcess
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReleaseMutex
SetEvent
Sleep
SystemTimeToFileTime
UnlockFileEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
GetCurrentThreadId
FindResourceA
GetModuleHandleA
InterlockedIncrement
LoadResource
MultiByteToWideChar
SetFileApisToANSI
SizeofResource
WideCharToMultiByte
lstrcatW
lstrlenW
GetCurrentDirectoryA
GetLargestConsoleWindowSize
GetSystemInfo
GlobalUnfix
LocalSize
QueueUserAPC
ReadConsoleInputW
SetCurrentDirectoryA
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WriteProfileStringW
AllocConsole
FindCloseChangeNotification
LoadLibraryW
QueueUserWorkItem
FillConsoleOutputAttribute
GetModuleHandleW
GetWindowsDirectoryW
GlobalFree
RaiseException
FindAtomA
GetComputerNameA
GetLocalTime
OutputDebugStringW
SetConsoleMode
lstrcmpW
CompareStringW
CreateNamedPipeW
FreeEnvironmentStringsW
GetSystemPowerStatus
LCMapStringA
LockFileEx
ReplaceFileW
ResetEvent
SetComputerNameA
SetErrorMode
TlsGetValue
UnlockFile
VerLanguageNameW
CreateDirectoryExA
FlushViewOfFile
GetFileSize
VerifyVersionInfoA
ExitProcess
RtlUnwind
GetLastError
CreatePipe
HeapFree
SetConsoleCtrlHandler
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
WriteConsoleA
GetConsoleCP
GetConsoleMode
GetCommandLineA
GetConsoleOutputCP
WriteConsoleW
HeapAlloc
VirtualFree
HeapReAlloc
SetFileAttributesW
GetFileAttributesW
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
FindFirstFileW
FindNextFileW
GetTimeFormatA
GetDateFormatA
FileTimeToLocalFileTime
HeapValidate
GetACP
GetOEMCP
GetCPInfo
IsBadReadPtr
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
IsBadCodePtr
SetStdHandle
HeapCreate
LCMapStringW
InitializeCriticalSection
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeProcess
CreateProcessA
VirtualProtect
VirtualQuery
HeapSize
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
FlushFileBuffers
ReadFile
CreateProcessW
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoW
oleaut32
VarFormatPercent
VarI4FromI2
VarCmp
VarI4FromStr
VarR4FromI4
VarR8FromI2
VarRound
VarUI2FromCy
VarCyFromR8
VarUI2FromBool
VarUI1FromCy
OleCreateFontIndirect
OleLoadPicturePath
SafeArrayAllocDescriptor
SafeArrayGetIID
SafeArrayUnaccessData
VarR8FromI4
VarSu
VarUI1FromBool
VarUI4FromDate
VarR4CmpR8
VariantCopy
user32
CharNextA
CharPrevA
CharUpperA
CreateDialogParamA
DestroyWindow
DispatchMessageA
EnableWindow
EndDialog
ExitWindowsEx
GetDC
GetDesktopWindow
GetDlgItem
GetDlgItemTextA
GetWindowRect
IsWindow
LoadStringA
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
OemToCharA
PeekMessageA
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetWindowPos
SetWindowTextA
ShowWindow
UpdateWindow
VkKeyScanExW
wsprintfA
CreateMenu
DialogBoxIndirectParamW
GetClassInfoExA
GetMonitorInfoW
GetScrollRange
InvalidateRect
LoadAcceleratorsA
MessageBoxIndirectW
PostQuitMessage
SendMessageTimeoutW
DrawTextA
GetKeyboardLayoutNameA
GetShellWindow
InflateRect
ModifyMenuA
SetScrollPos
BroadcastSystemMessageA
BroadcastSystemMessageW
GetKeyboardLayoutList
GetSystemMenu
InvalidateRgn
MessageBoxExA
TrackMouseEvent
UnregisterHotKey
CloseClipboard
DdeQueryConvInfo
EnumWindows
GetMenuCheckMarkDimensions
IsWindowEnabled
NotifyWinEvent
SetRect
CheckDlgButton
DdeAbandonTransaction
DdeCreateStringHandleW
DestroyCursor
GetParent
GetWindowLongW
LoadCursorW
MessageBoxW
PostMessageW
SendMessageW
SetCursor
SetWindowLongW
SetWindowTextW
VkKeyScanA
DdeDisconnectList
CharToOemW
DdeAccessData
DdeSetQualityOfService
GetInputState
GetWindowPlacement
IsCharUpperW
LoadBitmapA
TranslateAcceleratorW
AnyPopup
CharToOemBuffA
GetKeyboardLayout
Sections
.text Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 216KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 508KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE