Static task
static1
Behavioral task
behavioral1
Sample
a3c5e25871b5fab07efeacae70db1457063fc4a8e2a852fdf9f79a7777ae12c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3c5e25871b5fab07efeacae70db1457063fc4a8e2a852fdf9f79a7777ae12c7.exe
Resource
win10v2004-20221111-en
General
-
Target
a3c5e25871b5fab07efeacae70db1457063fc4a8e2a852fdf9f79a7777ae12c7
-
Size
468KB
-
MD5
0453ef4088b7eabda0bc6da042e174f1
-
SHA1
98de49aa5f68e53edbcdd4e6948d668616403c49
-
SHA256
a3c5e25871b5fab07efeacae70db1457063fc4a8e2a852fdf9f79a7777ae12c7
-
SHA512
bb2186aacc43ee7608beb1714dbfc28b46f0503bbce440508642bc095b6807ce8a69f27b285ca91321f4cb87ff9d37700adacb9d970792e250b5fa82e60c1394
-
SSDEEP
6144:Ov4nL//obM0zO7fufHQ/MqLFATQeewQeelQeesQee3gQeefQeeQVRzAOr9FwBMDu:Oa7cO7WfHvvRzOoMKMIyqO
Malware Config
Signatures
Files
-
a3c5e25871b5fab07efeacae70db1457063fc4a8e2a852fdf9f79a7777ae12c7.exe windows x86
5220ed7f7e9ab703cee63c0958e66f08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
user32
UnregisterHotKey
CreateDialogParamW
SetWindowTextW
EnableWindow
ShowWindow
GetAsyncKeyState
wsprintfW
GetDlgItem
IsWindowVisible
SetWindowPos
GetForegroundWindow
GetWindow
GetWindowInfo
LoadImageW
GetDC
ReleaseDC
RegisterHotKey
EnumDisplaySettingsW
MessageBoxW
LoadAcceleratorsW
PeekMessageW
PostMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
FindWindowW
GetMonitorInfoW
GetCursorPos
SendMessageW
DestroyWindow
PostQuitMessage
DefWindowProcW
LoadStringW
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
gdi32
GetObjectW
GetDIBits
DeleteObject
CreateDIBSection
DeleteDC
CreateDCW
GetDeviceCaps
GetStockObject
ExtEscape
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyA
kernel32
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetCurrentProcessId
InterlockedExchange
RtlUnwind
InitializeCriticalSection
VirtualQuery
GetSystemInfo
VirtualProtect
TlsGetValue
TlsSetValue
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RaiseException
SetStdHandle
HeapSize
GetTimeZoneInformation
GetLocaleInfoW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
IsBadReadPtr
LoadLibraryA
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
lstrcatW
lstrcpyW
lstrlenW
lstrcmpiW
lstrcpynW
GetVersionExW
GetProcAddress
LoadLibraryW
lstrcmpW
Sleep
FreeLibrary
ReleaseMutex
MultiByteToWideChar
GetLastError
CreateMutexW
ReadFile
SetFilePointer
CloseHandle
CreateFileW
GlobalFree
GlobalAlloc
IsBadCodePtr
GetModuleHandleW
GetUserDefaultLangID
ResetEvent
WaitForSingleObject
CreateThread
CreateEventW
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
SetLastError
GetCurrentThreadId
GetCurrentThread
TlsFree
Sections
.text Size: 256KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ