Static task
static1
Behavioral task
behavioral1
Sample
afb72893652b8126f222e04a9f667913ef19441ea538bb14cd9089f8e839d1f4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afb72893652b8126f222e04a9f667913ef19441ea538bb14cd9089f8e839d1f4.exe
Resource
win10v2004-20220812-en
General
-
Target
afb72893652b8126f222e04a9f667913ef19441ea538bb14cd9089f8e839d1f4
-
Size
810KB
-
MD5
31a13649ba386869ed51322e5ece39e4
-
SHA1
669e520da7f204c1abe2fa16b6c1ed71da589293
-
SHA256
afb72893652b8126f222e04a9f667913ef19441ea538bb14cd9089f8e839d1f4
-
SHA512
3617e4c7a50b0a175baaa0319b76aa71f40012efc80faa8f242c306047529ede067462a8aaaffa4f199a1e683581fa6248d2c76882573339a4ea97c7744ff794
-
SSDEEP
12288:EBYJBCx2jStLhdL3BWqxedq1cV6HVy3Nd4208s:IYJ1jSVLD8E1bVyn41
Malware Config
Signatures
Files
-
afb72893652b8126f222e04a9f667913ef19441ea538bb14cd9089f8e839d1f4.exe windows x86
18416998370f634ad48247f64a832b93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalUnlock
MulDiv
MultiByteToWideChar
OpenFile
QueryPerformanceCounter
RaiseException
SetFileAttributesA
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
LocalLock
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
LocalFree
LocalAlloc
InterlockedExchange
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemTime
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetCurrentProcess
GetAtomNameA
GetACP
FreeLibrary
FindFirstFileA
FindClose
DeleteFileA
DeleteAtom
CreateThread
CreateFileW
CloseHandle
AddAtomA
GetStartupInfoA
GetDriveTypeW
LoadLibraryA
GetCurrentThreadId
HeapAlloc
LoadLibraryW
GetVersion
GetModuleHandleW
VirtualAllocEx
GetCommandLineA
GetFileAttributesA
Sleep
GetLastError
WideCharToMultiByte
GetProcessHeap
user32
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
LoadAcceleratorsA
LoadCursorA
LoadStringA
LoadStringW
MessageBoxA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetRect
SetRectEmpty
SetScrollPos
SetWindowPos
SetWindowTextA
SystemParametersInfoA
TranslateAcceleratorA
TranslateMessage
UpdateWindow
IsIconic
IsDlgButtonChecked
IsClipboardFormatAvailable
InvalidateRect
InsertMenuA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollRange
GetScrollPos
GetMessageA
GetMenu
GetKeyState
GetDlgItemTextA
GetDC
GetClipboardData
GetClientRect
FillRect
EnumThreadWindows
EndPaint
EndDialog
EnableWindow
EnableScrollBar
EmptyClipboard
DrawTextA
DrawIcon
DrawFocusRect
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperBuffA
CharNextA
CharLowerA
BringWindowToTop
BeginPaint
ShowWindow
LoadIconA
LoadBitmapW
GetSysColor
SetWindowLongW
LoadIconW
EnableMenuItem
GetDlgItem
gdi32
GetLayout
GetStockObject
GetTextExtentPoint32A
PatBlt
SetBkColor
SetBkMode
GetDeviceCaps
SetTextAlign
SetTextColor
SetWindowExtEx
SetWindowOrgEx
TextOutA
TranslateCharsetInfo
DeleteObject
CreateFontIndirectA
CreateMetaFileA
SaveDC
CopyMetaFileA
CloseMetaFile
CreateCompatibleDC
CreateSolidBrush
CloseEnhMetaFile
SetLayout
GetBkColor
GetDCBrushColor
DeleteEnhMetaFile
GdiGetBatchLimit
FlattenPath
GetEnhMetaFileA
CloseFigure
SelectObject
EndDoc
GetDCPenColor
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueA
shell32
ShellExecuteExA
ShellAboutA
ExtractAssociatedIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ole32
CoInitialize
CoUninitialize
CoCreateInstance
shlwapi
PathFindExtensionW
winmm
timeGetTime
msvcrt
exit
memmove
strchr
_acmdln
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnprintf
Sections
.text Size: 776KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ