Static task
static1
Behavioral task
behavioral1
Sample
a9361ffcfa4fddbfd11dc3d319b4d3c048f6fafa560d040ef0016bbad7c2a02b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9361ffcfa4fddbfd11dc3d319b4d3c048f6fafa560d040ef0016bbad7c2a02b.exe
Resource
win10v2004-20220901-en
General
-
Target
a9361ffcfa4fddbfd11dc3d319b4d3c048f6fafa560d040ef0016bbad7c2a02b
-
Size
687KB
-
MD5
dcc5745ad317b82ea697a88fb39d98fb
-
SHA1
7ca3a180cf6d3d78b36094b51888f07b38838495
-
SHA256
a9361ffcfa4fddbfd11dc3d319b4d3c048f6fafa560d040ef0016bbad7c2a02b
-
SHA512
e34a232fb8a9dd5f861e9b0f4c16f1498d38941eea20e5569b009d429979eb0d92d411e22c3769ce1a2bc22836d8a8fb46b3afb2e968bdc47d0fcdfba73c7a91
-
SSDEEP
12288:Hc0mQ3eAbAfajfIahRlGsPZf4zrucyn8dCZgrErCK67fENNVqZ7x2:tmQ3lcajfPhRlZP2vucy7lrCKQENN0ZY
Malware Config
Signatures
Files
-
a9361ffcfa4fddbfd11dc3d319b4d3c048f6fafa560d040ef0016bbad7c2a02b.exe windows x86
f75ee71350b192bd9b238766b780e1ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetVersion
GetLastError
ExitProcess
HeapAlloc
GetProcessHeap
CompareStringA
VirtualAlloc
FindResourceA
VirtualFree
WriteFile
UnmapViewOfFile
IsValidCodePage
GetEnvironmentStrings
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
WritePrivateProfileStringA
SizeofResource
CreateProcessW
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetConsoleCP
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
LeaveCriticalSection
TlsSetValue
CreateFileW
Sleep
GetTimeZoneInformation
GlobalLock
FindNextFileA
CreateFileMappingA
ResetEvent
FindFirstFileA
CompareStringW
GetProcAddress
DeleteFileW
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetModuleHandleA
TlsAlloc
IsBadWritePtr
QueryPerformanceCounter
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetConsoleMode
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
lstrcmpiW
GetModuleFileNameA
GetVersionExA
IsDebuggerPresent
GetModuleFileNameW
SetLastError
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
LocalFree
GetOEMCP
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetStringTypeA
GetCPInfo
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
lstrcatA
GetLocaleInfoA
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
GetConsoleOutputCP
GetStdHandle
GetCurrentThread
GetTickCount
FlushFileBuffers
GetCommandLineA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
user32
CallWindowProcA
InvalidateRect
SystemParametersInfoA
MessageBoxA
SetForegroundWindow
GetDesktopWindow
LoadCursorA
ScreenToClient
GetDlgItem
CheckMenuItem
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
SetFocus
SetTimer
EnableMenuItem
GetWindow
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
PtInRect
GetClientRect
ReleaseDC
GetCursorPos
DispatchMessageA
IsWindow
SetWindowPos
GetFocus
gdi32
DeleteDC
SetBkColor
SetTextColor
Sections
.text Size: 653KB - Virtual size: 979KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ