Static task
static1
Behavioral task
behavioral1
Sample
a7c6c34598bcc24246743a488b4db2bbddb3279871ce8ccf7e086d0258f9969a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7c6c34598bcc24246743a488b4db2bbddb3279871ce8ccf7e086d0258f9969a.exe
Resource
win10v2004-20220812-en
General
-
Target
a7c6c34598bcc24246743a488b4db2bbddb3279871ce8ccf7e086d0258f9969a
-
Size
612KB
-
MD5
5d6638a297168b966ab3e30c991c8923
-
SHA1
89fb9805e7b374514dfac0dba98c26688e5ecd3f
-
SHA256
a7c6c34598bcc24246743a488b4db2bbddb3279871ce8ccf7e086d0258f9969a
-
SHA512
c9f26cc847fd53e2164c55dc605aa95ae317b7ffbd3e280de670a35bd3da6427ffcbab8c717c5a41d9a81e95c9f9ed04917994862f6d2576cb8200bd0fae7ae3
-
SSDEEP
12288:43UdjQh/IPZFHrcZ1VC4M/rrVSN/wA4aE9qlMg2H85h+6PIKnv:43wj8cZ14FvAHjB9qGg2H85M6QKv
Malware Config
Signatures
Files
-
a7c6c34598bcc24246743a488b4db2bbddb3279871ce8ccf7e086d0258f9969a.exe windows x86
ff77172aedb1f777f20010e98cbe52f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateCompatibleDC
DeleteObject
GetDeviceCaps
BitBlt
GetStockObject
SetTextColor
CreateSolidBrush
SetBkMode
SetBkColor
CreateCompatibleBitmap
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegCloseKey
kernel32
GetLastError
GetCommandLineA
GetCurrentProcessId
GetModuleHandleA
GetTickCount
GetCurrentThreadId
GetCurrentThread
ExitProcess
VirtualAlloc
FindResourceA
WriteConsoleW
Sleep
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
SizeofResource
SetStdHandle
GetVersion
GetACP
lstrcpynA
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GlobalFree
lstrlenA
UnmapViewOfFile
LCMapStringW
InterlockedIncrement
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
WaitForMultipleObjects
FindNextFileA
CreateFileMappingA
CompareStringA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
SetErrorMode
GetWindowsDirectoryA
GetModuleHandleW
CreateDirectoryA
GetFileSize
GetStartupInfoA
FreeLibrary
DeleteFileA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
IsBadWritePtr
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
SetConsoleCtrlHandler
LeaveCriticalSection
SetEndOfFile
GetConsoleMode
GlobalAlloc
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
MulDiv
CreateFileA
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
GetCPInfo
GetTempPathA
FreeEnvironmentStringsW
LoadLibraryExW
lstrcatA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetStdHandle
user32
SetCursor
CallWindowProcA
GetClientRect
SendMessageA
InvalidateRect
GetDC
IsWindowVisible
GetSysColor
MessageBoxA
SetDlgItemTextA
EndDialog
SetForegroundWindow
GetDesktopWindow
ScreenToClient
GetDlgItem
SetTimer
GetSubMenu
SetWindowTextA
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
KillTimer
BeginPaint
SetFocus
EndPaint
FillRect
CreateWindowExA
GetWindowLongA
EnableMenuItem
IsWindowEnabled
TranslateMessage
EnableWindow
SetCapture
ShowWindow
GetParent
DestroyWindow
MsgWaitForMultipleObjects
GetActiveWindow
ReleaseDC
DispatchMessageW
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
Sections
.text Size: 566KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ