Static task
static1
Behavioral task
behavioral1
Sample
afc2dc5ed0b88e939db38f35a5523c9eeda2e6c3c0b9f763c6c573af0603b67d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
afc2dc5ed0b88e939db38f35a5523c9eeda2e6c3c0b9f763c6c573af0603b67d.exe
Resource
win10v2004-20220812-en
General
-
Target
afc2dc5ed0b88e939db38f35a5523c9eeda2e6c3c0b9f763c6c573af0603b67d
-
Size
548KB
-
MD5
54bf62cedf6d9feacc546baf2e837aab
-
SHA1
3ebcb1853f9a604fe5d730c77af83f9ffca54cf0
-
SHA256
afc2dc5ed0b88e939db38f35a5523c9eeda2e6c3c0b9f763c6c573af0603b67d
-
SHA512
56fc89ec6f681f9d03d5bc585d0b784bdc9a2ba50f5b9df2cba5cc6b4fdad2c9a9356b5709b525e70ea8a9cfd011f6f55e5b20a6a0b388c9e2952d6e79433353
-
SSDEEP
12288:qkr0wYFDKY4GUaZus4Wn+aQDLJuACwruzOaClMuktVA/pf7bO:7Y4GUaZu/aotCwruzOaukepffO
Malware Config
Signatures
Files
-
afc2dc5ed0b88e939db38f35a5523c9eeda2e6c3c0b9f763c6c573af0603b67d.exe windows x86
9b9f4010f31780279f6f5df0eae23a79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
SetFilePointer
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CompareStringW
GetFileAttributesA
CloseHandle
GetLastError
HeapCreate
GetCurrentProcess
WriteConsoleW
HeapAlloc
HeapFree
HeapSize
EnterCriticalSection
LeaveCriticalSection
CreatePipe
HeapReAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
Sleep
SetStdHandle
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
GetCPInfo
GetACP
SetEnvironmentVariableA
user32
EndPaint
GetMessageA
GetSubMenu
LoadIconA
SendMessageA
BeginPaint
GetDC
TranslateMessage
GetMenu
CreateWindowExA
ReleaseDC
GetMenuState
ShowWindow
DispatchMessageA
LoadCursorA
DrawFrameControl
RegisterClassA
gdi32
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
Ellipse
SetROP2
GetStockObject
DeleteDC
comctl32
ImageList_Add
ImageList_Create
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ