Static task
static1
Behavioral task
behavioral1
Sample
a806de2fc8ac550340220ca749cb012f4bdb5300285d9c175f5959fe6226eecc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a806de2fc8ac550340220ca749cb012f4bdb5300285d9c175f5959fe6226eecc.exe
Resource
win10v2004-20220901-en
General
-
Target
a806de2fc8ac550340220ca749cb012f4bdb5300285d9c175f5959fe6226eecc
-
Size
652KB
-
MD5
630313d648eed9b0b75a8abdd478219f
-
SHA1
9974beba82c074f6c8faddb3325f43b1851c0f21
-
SHA256
a806de2fc8ac550340220ca749cb012f4bdb5300285d9c175f5959fe6226eecc
-
SHA512
47f4868bec530ca6753a13cf4d6bf1afd9a41aed4bc35050c681505d72d3cc350f5c470704df52fcb6d08cb825e7024579baad6f0d1078c24a78b35d447b46c4
-
SSDEEP
12288:iDUHBfEHnBgVpR5TqLALNPIuy0KBhWx1FqetYHxjbGHRU:auBfEHBgVpjmaNPLmhWjYetwjbGxU
Malware Config
Signatures
Files
-
a806de2fc8ac550340220ca749cb012f4bdb5300285d9c175f5959fe6226eecc.exe windows x86
62cfac9ff9aceec941239219288a9bfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetOEMCP
Sleep
VirtualFree
HeapCreate
SizeofResource
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
SetStdHandle
InterlockedIncrement
HeapAlloc
GetFileType
CreateEventA
CreateFileW
GlobalLock
DuplicateHandle
FindNextFileA
FindFirstFileA
lstrcmpA
GetProcessHeap
GetProcAddress
DeleteFileW
GetCPInfo
GetWindowsDirectoryA
DeleteFileA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
ExitProcess
SetHandleCount
EnterCriticalSection
HeapFree
LeaveCriticalSection
GetLocaleInfoA
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
GetLocalTime
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
GetExitCodeProcess
LocalFree
SetEvent
SetFileAttributesA
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
CreateFileA
ExpandEnvironmentStringsA
LocalAlloc
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
GetConsoleOutputCP
GetStdHandle
GetVersion
GetModuleHandleA
GetCurrentThread
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
GetLastError
FreeLibrary
GetCommandLineA
user32
GetDlgItem
SetWindowLongA
GetWindowRect
GetSystemMetrics
KillTimer
BeginPaint
SetFocus
DispatchMessageA
RegisterClassA
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
ScreenToClient
ReleaseDC
GetDC
PeekMessageA
EndPaint
SetWindowPos
PostQuitMessage
FillRect
SetForegroundWindow
MessageBoxA
GetSysColor
SystemParametersInfoA
GetFocus
wsprintfA
GetClientRect
SetCursor
LoadCursorA
LoadIconA
DestroyWindow
GetDesktopWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteDC
CreateSolidBrush
SetTextColor
advapi32
RegOpenKeyExA
RegCreateKeyExA
msvcrt
free
_exit
exit
Sections
.text Size: 615KB - Virtual size: 941KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ