Static task
static1
Behavioral task
behavioral1
Sample
ac74c7c7042c9d2766aab26ff7f83e13fa495e2990f1e228d0347e0f712e0829.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac74c7c7042c9d2766aab26ff7f83e13fa495e2990f1e228d0347e0f712e0829.exe
Resource
win10v2004-20220901-en
General
-
Target
ac74c7c7042c9d2766aab26ff7f83e13fa495e2990f1e228d0347e0f712e0829
-
Size
264KB
-
MD5
14f9f47c0c415c93e4bb0f0cdc55ca90
-
SHA1
90d5e2b78ae8b851c4b1588bd12bb95c4a537d5a
-
SHA256
ac74c7c7042c9d2766aab26ff7f83e13fa495e2990f1e228d0347e0f712e0829
-
SHA512
06d9933f3d68c653d2ac0bc211dbeab5c7f4a7dc408f34e1689441f45cf807ae2ce8fdd50341bb59881192ec901565f7b749e3ac70cd8a118639849a4293204e
-
SSDEEP
6144:+TkoauY75ev8KodrfSznIM7xwna7D6pu1aS8UTc0qLe:+Tkovq568E7xwaiqeB
Malware Config
Signatures
Files
-
ac74c7c7042c9d2766aab26ff7f83e13fa495e2990f1e228d0347e0f712e0829.exe windows x86
4747eac83ae28aad34cdda65be4d8043
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
EnumMonitorsA
OpenPrinterW
DocumentPropertiesA
version
GetFileVersionInfoSizeW
kernel32
GetModuleHandleA
VirtualFree
VirtualAlloc
lstrlenA
GetFileInformationByHandle
OpenFile
RaiseException
MoveFileExA
GetEnvironmentStrings
IsDBCSLeadByte
GetStringTypeW
ReadFile
VirtualQuery
CreateSemaphoreW
HeapFree
GlobalHandle
CreateThread
LoadLibraryExA
GetProfileStringW
InterlockedIncrement
CreateFileMappingW
SwitchToThread
CreateDirectoryW
DebugBreak
EnumResourceLanguagesW
GetModuleHandleW
GlobalLock
GetPrivateProfileSectionA
GetCurrentDirectoryW
lstrcpynW
ResumeThread
SetEndOfFile
SetHandleCount
LoadLibraryA
_lread
DeleteFileA
GetSystemDefaultLCID
CreateNamedPipeA
_lclose
GetUserDefaultLCID
GetLogicalDriveStringsW
IsBadReadPtr
SetProcessWorkingSetSize
GetSystemPowerStatus
FormatMessageA
GetNumberFormatW
WritePrivateProfileSectionA
GetFullPathNameW
RemoveDirectoryW
GetLongPathNameW
GetThreadLocale
CreateMutexW
FindResourceExA
GetCurrentDirectoryA
Process32NextW
SetFilePointerEx
GetSystemTime
InitializeCriticalSectionAndSpinCount
lstrcpynA
FindNextChangeNotification
SizeofResource
SetThreadLocale
CompareStringW
GetTimeZoneInformation
QueryDosDeviceA
TerminateProcess
MapViewOfFile
MoveFileW
TerminateThread
OpenMutexW
GlobalAlloc
MultiByteToWideChar
lstrcpyA
lstrcatW
SetThreadExecutionState
LocalAlloc
GetShortPathNameA
LocalLock
GetTickCount
GetFileAttributesW
HeapReAlloc
GetDriveTypeW
SetStdHandle
lstrcpyW
FreeEnvironmentStringsA
GlobalSize
GetProcessTimes
GlobalFindAtomW
FreeEnvironmentStringsW
GetLocaleInfoA
GetStartupInfoA
GetVolumeInformationW
GlobalMemoryStatus
GetFullPathNameA
CreateIoCompletionPort
GetProcessHeap
GetSystemDefaultUILanguage
advapi32
CreateServiceW
RegEnumKeyExW
ole32
CreateFileMoniker
CreateStreamOnHGlobal
OleIsCurrentClipboard
CoReleaseMarshalData
CLSIDFromProgID
CoDisconnectObject
OleTranslateAccelerator
StringFromIID
CoInitializeEx
CoRevokeClassObject
user32
FindWindowExW
FindWindowA
SendDlgItemMessageA
FillRect
GetClassInfoA
WaitMessage
RegisterClipboardFormatW
MessageBoxA
SetActiveWindow
msvcrt
ctime
_vsnwprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
sprintf
strstr
_strlwr
_itoa
wcsstr
fclose
_exit
floor
_c_exit
ceil
wcslen
towupper
realloc
_mbsrchr
wcstol
_iob
towlower
wcstod
_wtoi64
wcstok
_wtol
_purecall
_wcsupr
_wcsnicmp
malloc
_strnicmp
_expand
_ecvt
wcschr
calloc
wcscpy
srand
qsort
_wtoi
bsearch
strncmp
_ltow
wcsncpy
wcsrchr
_wcslwr
exit
_splitpath
memmove
_fpreset
_XcptFilter
Sections
.text Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE