Static task
static1
Behavioral task
behavioral1
Sample
a1cab2d4bf945e3450804a65125e91586edb4c22733123f1bf4342377a7986e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1cab2d4bf945e3450804a65125e91586edb4c22733123f1bf4342377a7986e2.exe
Resource
win10v2004-20220812-en
General
-
Target
a1cab2d4bf945e3450804a65125e91586edb4c22733123f1bf4342377a7986e2
-
Size
156KB
-
MD5
f21dc581a156622d95264369ac3bbab7
-
SHA1
01a6064e92b5df67b8c66e43ef6f6930bf815667
-
SHA256
a1cab2d4bf945e3450804a65125e91586edb4c22733123f1bf4342377a7986e2
-
SHA512
dc513389a4f14c8876c2a5ee8cf57b4e8a00e810aba345f1a14b2b2f7c46e7a368e71efe57c85fb08e49f2ec6a64220c0dadaf68d020a85da075f1f6ea377550
-
SSDEEP
3072:YiMjSoaNzWScAOEHgU/kU0A2mDD5z4HFJeiSCm4GofgRfV6HMx4Wob:zo8CLYGArdz4aVCBF+g
Malware Config
Signatures
Files
-
a1cab2d4bf945e3450804a65125e91586edb4c22733123f1bf4342377a7986e2.exe windows x86
a2b0d2394b73d4814afb65ca5932b902
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
EnumSystemLocalesA
FindNextChangeNotification
LocalShrink
CallNamedPipeW
GetStartupInfoW
CreateFileA
DosDateTimeToFileTime
CreateMailslotW
GetLogicalDriveStringsA
_lread
SetErrorMode
GetProfileStringW
lstrcmpiA
GetCurrentDirectoryW
GetCurrentThread
WriteConsoleW
FindResourceW
GetProcessPriorityBoost
FillConsoleOutputCharacterA
CreateDirectoryExA
GetDateFormatA
GlobalFindAtomW
GetLocaleInfoA
CancelIo
GetFileType
lstrcatA
EnterCriticalSection
FindResourceExW
RequestWakeupLatency
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetStringTypeW
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
user32
mouse_event
WaitForInputIdle
FrameRect
DialogBoxIndirectParamW
GetClassInfoExA
ModifyMenuA
CallWindowProcW
EndDialog
GetUpdateRect
GetParent
SetProcessWindowStation
WinHelpA
GetClientRect
LoadBitmapA
CharToOemBuffW
SetClipboardData
MapVirtualKeyA
SetMenuItemInfoA
DestroyCaret
AppendMenuW
GetWindowWord
SetWindowsHookW
GetClassInfoExW
GetWindowRect
DdeAddData
DrawMenuBar
UnhookWinEvent
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE