Static task
static1
Behavioral task
behavioral1
Sample
afa55fa823daa0180e377cc3efeed26060f6a0141b4b058cf19ab3111e617ae5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afa55fa823daa0180e377cc3efeed26060f6a0141b4b058cf19ab3111e617ae5.exe
Resource
win10v2004-20220812-en
General
-
Target
afa55fa823daa0180e377cc3efeed26060f6a0141b4b058cf19ab3111e617ae5
-
Size
68KB
-
MD5
e9a584bae89d9127595b596fee14f8c0
-
SHA1
36d15b8e248b5a6ba64c7ccd8efc8fb416ba82ae
-
SHA256
afa55fa823daa0180e377cc3efeed26060f6a0141b4b058cf19ab3111e617ae5
-
SHA512
4618f90ab40760a3a59d2504e6b0730dbf61d1c3180a93ab1cb912c90bada4ad810684d6cce4f8a3e7837fc165243507da1d79903b5d2db0da4f1bf4c2951712
-
SSDEEP
1536:qIyS3EwTX9MKpz0dBpKGkfDna7TT2NBq57DiIj:IS0KNM6xO7nb5nF
Malware Config
Signatures
Files
-
afa55fa823daa0180e377cc3efeed26060f6a0141b4b058cf19ab3111e617ae5.exe windows x86
dfaba860234bf818e7790d449a90b5eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
sprintf
strlen
memcpy
strcpy
memmove
strcmp
strncmp
fabs
ceil
malloc
floor
free
fclose
strncpy
strcat
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
HeapAlloc
HeapFree
InitializeCriticalSection
HeapReAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetVersionExA
TlsAlloc
GetCurrentDirectoryA
FindClose
FindFirstFileA
GetLastError
FindNextFileA
DeleteFileA
WriteFile
CloseHandle
CreateFileA
ReadFile
SetFilePointer
DeleteCriticalSection
InterlockedCompareExchange
Sleep
InterlockedExchange
user32
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
GetWindowLongA
SetWindowPos
EnableWindow
EnumWindows
DestroyWindow
GetPropA
RemovePropA
CallWindowProcA
DefWindowProcA
SetPropA
SetWindowLongA
ValidateRect
GetWindowRect
GetParent
MapWindowPoints
InvalidateRect
CreateWindowExA
SendMessageA
GetSysColor
RedrawWindow
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetWindow
SetFocus
GetSysColorBrush
GetDC
InflateRect
ReleaseDC
GetWindowDC
MoveWindow
GetClientRect
FillRect
GetSystemMetrics
DrawFrameControl
PeekMessageA
TranslateMessage
DispatchMessageA
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRectEx
GetActiveWindow
ShowWindow
CreateAcceleratorTableA
GetMenu
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
SetCursorPos
LoadImageA
SetCursor
SystemParametersInfoA
GetKeyState
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
GetFocus
EnumChildWindows
DefFrameProcA
IsChild
GetClassNameA
DestroyIcon
gdi32
GetStockObject
SetBkColor
SetTextColor
ExcludeClipRect
CreatePen
SelectObject
MoveToEx
LineTo
DeleteObject
CreateCompatibleBitmap
CreateDCA
CreateCompatibleDC
DeleteDC
GetObjectA
StretchBlt
GetObjectType
CreateDIBSection
CreateSolidBrush
GetDIBits
BitBlt
CreateBitmap
SetPixel
comctl32
InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
ImageList_GetIconSize
ole32
CoInitialize
RevokeDragDrop
Sections
.code Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 773B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ