Static task
static1
Behavioral task
behavioral1
Sample
86097c939d92c6b5d1bd71a9ba5ab860d934ab130093c7909025378ee9490b1d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86097c939d92c6b5d1bd71a9ba5ab860d934ab130093c7909025378ee9490b1d.exe
Resource
win10v2004-20220812-en
General
-
Target
86097c939d92c6b5d1bd71a9ba5ab860d934ab130093c7909025378ee9490b1d
-
Size
436KB
-
MD5
abe939fd3760d960d956b7956c26730d
-
SHA1
9c2749303efb8421703758599f2fa4f97bd9dc56
-
SHA256
86097c939d92c6b5d1bd71a9ba5ab860d934ab130093c7909025378ee9490b1d
-
SHA512
29125b4e1e108d2b36e658062a6f5f7f4a944de906b85594f406789a8a9a31000c6d8459cff8d18d2a54dc342f54a79d02e80512ae63a2b7a67835b7cced43cb
-
SSDEEP
12288:fRkvtlXQSmqzcRiNBAfGLgP1jgkI08dfu6:JM9eqCiN+wgP12hf5
Malware Config
Signatures
Files
-
86097c939d92c6b5d1bd71a9ba5ab860d934ab130093c7909025378ee9490b1d.exe windows x86
0776722e55654166878499d59c2c0ad4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
FreeEnvironmentStringsW
DeleteFileW
GetStringTypeA
CreateProcessA
VirtualFree
FreeEnvironmentStringsA
ReleaseMutex
GetCPInfo
LeaveCriticalSection
GetStartupInfoA
FindNextFileA
LoadLibraryExA
EnterCriticalSection
GetCommandLineW
WritePrivateProfileStringA
UnmapViewOfFile
FindClose
SetStdHandle
ResetEvent
LocalFree
SetUnhandledExceptionFilter
FlushFileBuffers
VirtualProtect
LockResource
GetEnvironmentStrings
TerminateProcess
GetEnvironmentStringsW
VirtualAlloc
HeapReAlloc
HeapAlloc
GetOEMCP
IsDebuggerPresent
QueryPerformanceCounter
FindNextFileW
GlobalFree
LoadResource
LoadLibraryA
CloseHandle
DeleteFileA
GetSystemTimeAsFileTime
DuplicateHandle
SetEnvironmentVariableA
CreateFileMappingA
HeapCreate
SetEndOfFile
FindFirstFileW
GetProcAddress
LoadLibraryW
TlsFree
SetFileAttributesA
InterlockedExchange
InterlockedDecrement
GetACP
GlobalAlloc
GetSystemDirectoryA
SetHandleCount
GetVersionExA
GetSystemInfo
FindResourceA
GetModuleHandleW
InitializeCriticalSection
GlobalUnlock
GetConsoleMode
FindFirstFileA
GetConsoleCP
LCMapStringA
TlsSetValue
MapViewOfFile
VirtualQuery
CreateThread
Sleep
ReadFile
CreateEventA
HeapDestroy
LocalAlloc
HeapSize
GetCurrentProcess
GetConsoleOutputCP
GetStringTypeW
CompareStringW
CompareStringA
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
GetLastError
HeapFree
TlsGetValue
SizeofResource
FormatMessageA
GetCurrentThreadId
GetVersion
TlsAlloc
GetFileType
CreateFileA
GetCurrentThread
GetCurrentProcessId
GetTempPathA
GetFileSize
ExpandEnvironmentStringsA
SetFilePointer
GetPrivateProfileStringA
WaitForMultipleObjects
InterlockedCompareExchange
UnhandledExceptionFilter
CreateFileW
GetProcessHeap
GetModuleFileNameW
GetTimeZoneInformation
WaitForSingleObject
GetTickCount
GetFullPathNameA
GetFileAttributesW
GetDriveTypeA
lstrlenA
GetWindowsDirectoryA
InterlockedIncrement
GetLocaleInfoA
MultiByteToWideChar
lstrlenW
LCMapStringW
FormatMessageW
SetErrorMode
ExitProcess
RaiseException
FreeLibrary
IsValidCodePage
SetEvent
DeleteCriticalSection
WriteConsoleW
GetCommandLineA
SetLastError
WriteConsoleA
lstrcpyA
lstrcpynA
GetLocalTime
gdi32
CreateCompatibleDC
GetDeviceCaps
BitBlt
SelectObject
DeleteObject
DeleteDC
SetBkColor
SetBkMode
user32
UpdateWindow
PostQuitMessage
RegisterClassA
IsWindowVisible
GetKeyState
IsWindow
DispatchMessageA
PostMessageA
TranslateMessage
GetWindowRect
SetDlgItemTextA
CallWindowProcA
LoadIconA
DefWindowProcA
EnableWindow
EndDialog
InvalidateRect
ClientToScreen
SystemParametersInfoA
DestroyWindow
ReleaseCapture
TrackPopupMenu
IsIconic
SetCursor
LoadCursorA
SetForegroundWindow
ShowWindow
IsWindowEnabled
MessageBoxA
GetClientRect
SetWindowPos
SendMessageA
GetFocus
GetSysColor
ReleaseDC
GetDC
GetParent
GetWindow
GetDlgItem
SetWindowLongA
FillRect
BeginPaint
GetActiveWindow
GetWindowLongA
GetSystemMetrics
GetDesktopWindow
KillTimer
SetWindowTextA
ScreenToClient
advapi32
RegDeleteValueA
RegSetValueExA
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 372KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ