Static task
static1
Behavioral task
behavioral1
Sample
a1ac41e919c91c1bb872f0e42e0e0aff054707c00f5c5c394263b37ff10814b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1ac41e919c91c1bb872f0e42e0e0aff054707c00f5c5c394263b37ff10814b0.exe
Resource
win10v2004-20220812-en
General
-
Target
a1ac41e919c91c1bb872f0e42e0e0aff054707c00f5c5c394263b37ff10814b0
-
Size
57KB
-
MD5
e2eabd5ed3b45a7c8a06e5accda7f993
-
SHA1
66f3c2e3691bf644276d63d06e0d459a794a1ca4
-
SHA256
a1ac41e919c91c1bb872f0e42e0e0aff054707c00f5c5c394263b37ff10814b0
-
SHA512
63c76eebd5c1fe16f1188c89336a1f8742e6bc11f1e820910a626a33478a56027ae4b748227dab812a451e0525970fa988ea26ad56edc2212bcda713fa28b0cf
-
SSDEEP
1536:h9itpYcHJhcqu4sjRWAKOlABbelHUABaVDr7n18N:fopY8r5u4ERWK8WUhVX7u
Malware Config
Signatures
Files
-
a1ac41e919c91c1bb872f0e42e0e0aff054707c00f5c5c394263b37ff10814b0.exe windows x86
3cca307d2f9a756964c244a8a2550085
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyboardState
SetThreadDesktop
LoadCursorA
GetDlgItem
FindWindowExA
MsgWaitForMultipleObjects
GetWindowTextA
CharLowerBuffA
EndDialog
GetCursorPos
OpenDesktopA
GetClipboardData
CloseWindowStation
DispatchMessageA
GetClassNameA
GetForegroundWindow
kernel32
GlobalUnlock
GetTickCount
MultiByteToWideChar
VirtualProtect
LeaveCriticalSection
lstrlenA
lstrcmpiW
GetFileSizeEx
CreateEventW
SystemTimeToFileTime
CreateMutexW
VirtualAlloc
HeapAlloc
WaitForSingleObject
WideCharToMultiByte
CreateProcessW
GetUserDefaultUILanguage
GetFileSize
HeapFree
GetLocalTime
SetFileTime
FindResourceW
GetModuleFileNameW
lstrcmpiA
shlwapi
wvnsprintfA
SHDeleteKeyA
wnsprintfW
PathFindFileNameW
wvnsprintfW
wnsprintfA
PathCombineW
PathFileExistsW
PathRemoveFileSpecW
advapi32
RegEnumKeyExA
CryptCreateHash
RegCreateKeyExA
CryptDestroyHash
RegCloseKey
RegQueryValueExA
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE