Static task
static1
Behavioral task
behavioral1
Sample
a3aef09c4136b24d7a5d9ad9864e258aa05968939d282efbdc8abcdc78a73783.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3aef09c4136b24d7a5d9ad9864e258aa05968939d282efbdc8abcdc78a73783.exe
Resource
win10v2004-20221111-en
General
-
Target
a3aef09c4136b24d7a5d9ad9864e258aa05968939d282efbdc8abcdc78a73783
-
Size
768KB
-
MD5
c46a1165f045539637113a61ae65096e
-
SHA1
5c3f192b9a7138cb3d3fd5d3f1ec21813d5880a1
-
SHA256
a3aef09c4136b24d7a5d9ad9864e258aa05968939d282efbdc8abcdc78a73783
-
SHA512
5555a52560bd54464b0f40943e72074dea5ee434d87d65d5d533f32bbee8677f384858031151ada47b61b8f01e8a4b93546a449fc3b62aa0ab8d50733c3c8738
-
SSDEEP
12288:ZLCcUfzSSfmck4cUK0WqVtaI1UHNc2SEJHiiRP2TG8LTOqGRgnhy4q:dCcU7DkCK5eh1Uy2SMjAGRUy4q
Malware Config
Signatures
Files
-
a3aef09c4136b24d7a5d9ad9864e258aa05968939d282efbdc8abcdc78a73783.exe windows x86
194f35e1e6f279c9c1dc0c83a9be3dd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetCurrentProcessId
GetTickCount
GetLastError
GetCurrentThread
GetModuleHandleA
GetCommandLineA
GetCurrentThreadId
ExitProcess
VirtualAlloc
GetOEMCP
WriteFile
HeapCreate
CreateProcessA
GetACP
CloseHandle
SetFilePointer
TlsFree
RaiseException
GetCPInfo
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GlobalFree
lstrlenA
LCMapStringW
InterlockedIncrement
CreateFileA
GetFileType
CreateEventA
CreateFileW
lstrcpyA
FindNextFileW
GetProcessHeap
GetProcAddress
DeleteFileA
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
GetLocaleInfoA
VirtualQuery
TerminateProcess
GetSystemDirectoryA
SetUnhandledExceptionFilter
MultiByteToWideChar
TlsGetValue
HeapAlloc
GetModuleFileNameW
FormatMessageA
InterlockedDecrement
FindClose
InitializeCriticalSection
SetEvent
SetFileAttributesA
GetStringTypeW
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
GetCurrentProcess
WaitForSingleObject
FileTimeToSystemTime
GetConsoleOutputCP
GetStdHandle
user32
SetCursor
IsWindowVisible
ScreenToClient
GetDlgItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetSystemMetrics
ReleaseDC
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
TranslateMessage
EnableWindow
ShowWindow
DefWindowProcA
DestroyWindow
GetClientRect
GetCursorPos
GetDC
EndPaint
IsWindow
SetWindowPos
SetForegroundWindow
Sections
.text Size: 726KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ