Static task
static1
Behavioral task
behavioral1
Sample
afed927009bc29b7f6910023f58ba01407b2592898ecf610b12ebeb26d7b2186.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afed927009bc29b7f6910023f58ba01407b2592898ecf610b12ebeb26d7b2186.exe
Resource
win10v2004-20220812-en
General
-
Target
afed927009bc29b7f6910023f58ba01407b2592898ecf610b12ebeb26d7b2186
-
Size
868KB
-
MD5
4b0976ffa0b4d38f198780a82f1efa35
-
SHA1
bce9b3aad6243c8cd53212bb7900018954ec4424
-
SHA256
afed927009bc29b7f6910023f58ba01407b2592898ecf610b12ebeb26d7b2186
-
SHA512
35d7273c2badf9ecda7a6cb0166b98b0fe09a6dd126821e0e550b3707151e395f933144c83f03a8a6d0c1a4e4fa661b77b0bb29fe5d0f4b50861c887bca5b040
-
SSDEEP
24576:w8ibnWadYfvfPm7IGOpRe6GvVaPGsGvh:wVnHYfnej6Ghsg
Malware Config
Signatures
Files
-
afed927009bc29b7f6910023f58ba01407b2592898ecf610b12ebeb26d7b2186.exe windows x86
d06805e3fad2ca075f2fde137ae72f84
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrencyFormatA
GetUserDefaultUILanguage
_lwrite
HeapAlloc
MultiByteToWideChar
FindNextChangeNotification
FreeResource
ResumeThread
GetNumberFormatW
SetLastError
GetPrivateProfileSectionNamesW
GetProfileIntA
SetSystemPowerState
FindNextVolumeMountPointW
TlsSetValue
FindNextVolumeMountPointA
DebugActiveProcess
QueryPerformanceCounter
WriteProfileSectionW
CreateHardLinkW
WaitForSingleObject
BackupWrite
SetFileAttributesW
IsDBCSLeadByte
FlushViewOfFile
GetStringTypeExA
GetSystemDefaultLCID
LockFileEx
GetTickCount
ReleaseSemaphore
EnumUILanguagesW
LocalHandle
GetCommandLineA
SystemTimeToTzSpecificLocalTime
EnumLanguageGroupLocalesA
CompareStringA
LocalFree
GetCurrentDirectoryA
WaitForSingleObjectEx
GetSystemDefaultLangID
ChangeTimerQueueTimer
CreateNamedPipeA
user32
LoadCursorA
GetKeyboardLayoutNameW
DdeEnableCallback
InflateRect
RegisterDeviceNotificationW
GetClipCursor
SetClassLongW
GetProcessWindowStation
GetDlgItemTextW
GetWindowWord
GetCursorPos
DestroyCaret
SetPropW
SendMessageTimeoutW
MessageBoxExW
ImpersonateDdeClientWindow
DrawTextW
DdePostAdvise
ValidateRgn
SetClassWord
GetCursorInfo
ReleaseCapture
IMPSetIMEA
ShowScrollBar
RegisterWindowMessageA
SetDebugErrorLevel
ShowWindow
SetShellWindow
EnumDisplayMonitors
DefFrameProcW
GetKeyNameTextA
SendDlgItemMessageA
DdeSetQualityOfService
MsgWaitForMultipleObjectsEx
SendNotifyMessageW
SendDlgItemMessageW
GetClassNameA
IsWindow
DrawAnimatedRects
DialogBoxParamW
UpdateLayeredWindow
LoadBitmapW
IsRectEmpty
MessageBoxW
ClipCursor
CloseDesktop
NotifyWinEvent
GetWindowTextLengthA
DdeQueryConvInfo
AppendMenuW
EnableScrollBar
SetWindowContextHelpId
LoadStringA
GetDlgItemTextA
DdeImpersonateClient
MessageBoxIndirectW
GetDlgItemInt
SwitchDesktop
IMPGetIMEA
EnumDisplayDevicesA
SetMenuInfo
ModifyMenuA
DrawTextExA
SetMenu
SetParent
PtInRect
DeregisterShellHookWindow
UserHandleGrantAccess
TranslateMessage
GetDialogBaseUnits
GetKeyboardLayoutList
DlgDirListComboBoxW
MapVirtualKeyExW
DrawTextA
DdeCmpStringHandles
InsertMenuA
DialogBoxIndirectParamW
EnumDesktopWindows
DdeUninitialize
CreateAcceleratorTableA
GetInputState
SetMenuDefaultItem
GetDCEx
GetWindowPlacement
SetDlgItemTextA
PostThreadMessageA
CreateMenu
BeginPaint
LookupIconIdFromDirectory
SetThreadDesktop
PostQuitMessage
RegisterShellHookWindow
DdeAbandonTransaction
RealChildWindowFromPoint
SetMessageExtraInfo
IMPGetIMEW
MonitorFromRect
EnumDisplayDevicesW
GetDlgItem
CheckMenuRadioItem
GetIconInfo
GetClassInfoA
WINNLSEnableIME
GetClassInfoExW
IsDialogMessageA
IMPSetIMEW
DestroyWindow
DdeFreeDataHandle
GetSubMenu
TrackPopupMenu
GetMonitorInfoW
CharPrevExA
ReuseDDElParam
DlgDirListComboBoxA
DrawCaption
EnumPropsA
EmptyClipboard
GetActiveWindow
OemToCharBuffW
DdeCreateStringHandleA
RegisterWindowMessageW
IsWindowEnabled
DdeConnectList
ToAscii
Sections
.text Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 285KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ