Static task
static1
Behavioral task
behavioral1
Sample
a7c1e9290bc48b253cb1b84685ec05fb4c2641233aea2a7697fd92e947732a51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7c1e9290bc48b253cb1b84685ec05fb4c2641233aea2a7697fd92e947732a51.exe
Resource
win10v2004-20220812-en
General
-
Target
a7c1e9290bc48b253cb1b84685ec05fb4c2641233aea2a7697fd92e947732a51
-
Size
124KB
-
MD5
9a49dfd863018c79125b0c3d32483019
-
SHA1
89da18378b35a29ac5208465d60960d0537b76e6
-
SHA256
a7c1e9290bc48b253cb1b84685ec05fb4c2641233aea2a7697fd92e947732a51
-
SHA512
2b8fcb7dd1d5e7f26b78caf1b30e0ac7f91a4130e706ee824f992977f22577e2a1e5ee11d34d3ac5eb17c5065d96eecaad8b47e57cc1bcc1b940f8e87db0a664
-
SSDEEP
1536:qhV9oquTxI1xll6udAQmv3iBmDD/diy8PUSUwngLcEWKuUCWRs8e:qhV9oquTxIbFdAEmXsdQhIEWJWR2
Malware Config
Signatures
Files
-
a7c1e9290bc48b253cb1b84685ec05fb4c2641233aea2a7697fd92e947732a51.exe windows x86
5c465b3a06d9af6a87052988ce9e267e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegConnectRegistryA
RegEnumKeyExA
RegCloseKey
kernel32
GetLastError
CreateMutexA
GetSystemPowerStatus
ExitProcess
CreateThread
GetProcAddress
DeleteAtom
WaitForSingleObject
GetVersionExA
GetLocalTime
lstrlenA
lstrcpyA
GetStartupInfoA
lstrcatA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetErrorMode
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
GetModuleHandleA
CloseHandle
LocalAlloc
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
MultiByteToWideChar
GetCurrentProcessId
GetFullPathNameA
GetDriveTypeA
TlsGetValue
TlsSetValue
GetEnvironmentVariableA
lstrcpynA
InterlockedExchange
CreateDirectoryA
GetLocaleInfoA
IsBadWritePtr
GetUserDefaultLCID
LocalReAlloc
lstrcmpiW
GetSystemTime
GetFileAttributesA
SetFileAttributesA
GetFileSize
SetThreadPriority
SetCurrentDirectoryA
SearchPathA
CreateProcessA
SetEnvironmentVariableA
GetTickCount
GetExitCodeProcess
TlsAlloc
TlsFree
LocalFree
WriteFile
ResetEvent
WaitForMultipleObjects
FindNextChangeNotification
VirtualFree
RtlUnwind
LoadLibraryExA
EnterCriticalSection
LeaveCriticalSection
FindFirstChangeNotificationA
Sleep
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
GetComputerNameA
lstrcmpiA
CreateFileA
DeleteFileA
FindClose
FindNextFileA
FindFirstFileA
ReadFile
SetFilePointer
ExpandEnvironmentStringsA
SystemTimeToFileTime
FindCloseChangeNotification
FormatMessageA
SetEndOfFile
IsDBCSLeadByte
GetTimeFormatA
GetDateFormatA
FreeLibrary
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetCurrentDirectoryA
CreateEventA
CompareFileTime
SetEvent
LocalFileTimeToFileTime
gdi32
GetStockObject
user32
LoadIconA
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
DestroyWindow
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
SetCursor
CreatePopupMenu
GetMenuDefaultItem
wsprintfA
PostQuitMessage
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenuEx
RemoveMenu
DestroyMenu
DestroyIcon
LoadImageA
LoadStringA
MessageBoxA
FindWindowA
EnumWindows
EnumThreadWindows
GetWindowThreadProcessId
CharNextA
LoadMenuA
GetSubMenu
DefWindowProcA
SendMessageA
shell32
FindExecutableA
Shell_NotifyIconA
SHGetDesktopFolder
SHChangeNotify
shlwapi
PathFindFileNameA
PathFindExtensionA
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ