Static task
static1
Behavioral task
behavioral1
Sample
a7e78cb16d927c9f3ddd05bdf88967e765294b9341b966877c993950c6d87bad.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7e78cb16d927c9f3ddd05bdf88967e765294b9341b966877c993950c6d87bad.exe
Resource
win10v2004-20221111-en
General
-
Target
a7e78cb16d927c9f3ddd05bdf88967e765294b9341b966877c993950c6d87bad
-
Size
623KB
-
MD5
5e5ed8575d5d32751fb54e0a210ed532
-
SHA1
afee2b6dcb6d8c4becd541137cea8e2d8450ef95
-
SHA256
a7e78cb16d927c9f3ddd05bdf88967e765294b9341b966877c993950c6d87bad
-
SHA512
389bfd213cb68015841d03a21541296f493e001f45fe240cacbe4755d12e5be0d6c33953d8df28c1ca2bf395ad911ce1b7ce9dd6b07985be1cab4846c67a6222
-
SSDEEP
12288:3NIOXGysFHNANqDH0rB7t+OD60d2X55JFd2aP9Mzrm3X:FXbSHN49IODWPiOX
Malware Config
Signatures
Files
-
a7e78cb16d927c9f3ddd05bdf88967e765294b9341b966877c993950c6d87bad.exe windows x86
a368be5716cccc582e43dc70164352c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
ExitProcess
GetModuleHandleA
VirtualAlloc
FindResourceA
Sleep
VirtualFree
WriteFile
HeapCreate
CreateProcessA
SizeofResource
InterlockedExchange
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
lstrlenA
GetSystemInfo
UnmapViewOfFile
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateFileW
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
CreateFileMappingA
CompareStringA
GlobalFree
FindNextFileW
CompareStringW
GetProcessHeap
GetProcAddress
SetEvent
DeleteFileA
LCMapStringW
GetFileSize
GetTickCount
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
FreeLibrary
SetHandleCount
GetSystemTime
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
GetLocalTime
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
GetOEMCP
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetStringTypeA
WideCharToMultiByte
SetStdHandle
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCurrentProcessId
GetCurrentThread
GetVersion
GetLastError
GetStartupInfoA
GetCommandLineA
advapi32
RegOpenKeyExW
RegSetValueExW
RegSetValueExA
RegDeleteKeyA
RegCloseKey
user32
ReleaseDC
GetDesktopWindow
LoadIconA
LoadCursorA
ClientToScreen
GetDlgItem
GetWindowLongA
CheckMenuItem
SetWindowTextA
EndDialog
SetWindowLongA
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
PeekMessageA
SetFocus
EndPaint
FillRect
CreateWindowExA
GetFocus
RegisterClassA
EnableMenuItem
DispatchMessageA
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
PtInRect
GetClientRect
SendMessageA
GetDC
IsWindow
SetWindowPos
PostQuitMessage
MoveWindow
DestroyWindow
MessageBoxA
GetSysColor
IsWindowVisible
GetSubMenu
SetCursor
oleaut32
SysFreeString
SysStringLen
VariantClear
SysAllocString
Sections
.text Size: 592KB - Virtual size: 915KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ