Static task
static1
Behavioral task
behavioral1
Sample
a2b52386a7f202c226b84c9f6a737579da4f71bbe5c6749f4902e5b4f43eaa5e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2b52386a7f202c226b84c9f6a737579da4f71bbe5c6749f4902e5b4f43eaa5e.exe
Resource
win10v2004-20220812-en
General
-
Target
a2b52386a7f202c226b84c9f6a737579da4f71bbe5c6749f4902e5b4f43eaa5e
-
Size
388KB
-
MD5
429ba25c6448d5efbe89e3f40b172b01
-
SHA1
e2c1d7c819c7077c412ec785a49fc889d5023dce
-
SHA256
a2b52386a7f202c226b84c9f6a737579da4f71bbe5c6749f4902e5b4f43eaa5e
-
SHA512
bdeb225e6826bdb54f816345dfa70ec405a423aae89625fab904313338bcf48f086176b97d55f46c4d7aed6b1b2314cd94bacd6e3cfbbb0b43e52eb3c5b3fb60
-
SSDEEP
6144:o5RBYbyK9FQ+7N8MEdE9nK4CH4hmlvkOqxMO/ZaqsRq:o5RybyA2PE9nnYWmOOqe6Zoq
Malware Config
Signatures
Files
-
a2b52386a7f202c226b84c9f6a737579da4f71bbe5c6749f4902e5b4f43eaa5e.exe windows x86
b36244d5a7c2d63cf8f779b13a3883d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
GlobalAlloc
GetVolumeInformationW
GetProcessVersion
WriteProfileStringA
SetCriticalSectionSpinCount
GetSystemPowerStatus
GetCurrentDirectoryA
lstrcmpi
TransactNamedPipe
GetDiskFreeSpaceW
GetLargestConsoleWindowSize
SetLastError
LoadLibraryExW
SearchPathA
WaitForSingleObject
CreateConsoleScreenBuffer
FreeConsole
GetModuleFileNameW
FindFirstFileExW
GetVersionExA
GetNumberOfConsoleMouseButtons
CreateProcessW
LocalLock
GetWindowsDirectoryA
GetPrivateProfileStructW
IsDebuggerPresent
GetSystemDirectoryA
ResumeThread
FindClose
GlobalFindAtomA
GetEnvironmentStringsW
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
FlushInstructionCache
LocalCompact
ReadConsoleInputA
ReadConsoleOutputAttribute
SetThreadIdealProcessor
lstrcatA
CreateWaitableTimerW
SetConsoleScreenBufferSize
FormatMessageW
PeekConsoleInputW
DeviceIoControl
SetFileAttributesA
MoveFileExA
WriteProfileSectionA
ReadConsoleOutputCharacterW
GetThreadPriorityBoost
GetProcessPriorityBoost
GetShortPathNameW
SignalObjectAndWait
FreeEnvironmentStringsW
GetLogicalDriveStringsW
TlsSetValue
FreeEnvironmentStringsA
lstrcpyn
Sleep
WriteConsoleInputW
UnlockFileEx
GetStartupInfoW
InterlockedDecrement
LocalAlloc
GetFileTime
DeleteCriticalSection
GetLongPathNameA
SetFilePointer
GetThreadContext
WaitForDebugEvent
SetLocaleInfoW
WritePrivateProfileStructW
CommConfigDialogA
GlobalAddAtomA
SetConsoleWindowInfo
GetCalendarInfoA
RtlZeroMemory
GlobalLock
gdi32
UnrealizeObject
SetWorldTransform
CreateEnhMetaFileW
GetWorldTransform
DeleteMetaFile
OffsetViewportOrgEx
CloseFigure
SetDIBits
GetSystemPaletteUse
OffsetWindowOrgEx
GetGlyphOutlineW
StartDocA
RemoveFontResourceA
PlayMetaFileRecord
SetPaletteEntries
GetTextFaceA
GetRgnBox
GetLogColorSpaceW
CreateICW
CreateCompatibleDC
SetMetaFileBitsEx
Chord
GetSystemPaletteEntries
EnableEUDC
EnumFontFamiliesA
PlayEnhMetaFileRecord
EnumFontFamiliesExW
FlattenPath
GetTextCharacterExtra
PolyBezier
SetPolyFillMode
OffsetClipRgn
GetDIBits
GetMapMode
GetEnhMetaFileW
RemoveFontResourceW
Arc
SetColorAdjustment
EnumEnhMetaFile
GetViewportOrgEx
AnimatePalette
GetArcDirection
CloseEnhMetaFile
ExcludeClipRect
GetCharABCWidthsFloatW
SelectClipPath
CreateMetaFileW
DeleteColorSpace
GdiSetBatchLimit
GetClipRgn
DrawEscape
CreateDIBPatternBrushPt
MaskBlt
ResetDCA
UpdateICMRegKeyA
CreateCompatibleBitmap
EqualRgn
FillRgn
EndPath
GetKerningPairs
CreateColorSpaceA
CreateEllipticRgnIndirect
RoundRect
CreateDIBPatternBrush
GetGlyphOutlineA
CreateSolidBrush
CreatePalette
GetPixel
CopyEnhMetaFileA
GetEnhMetaFileDescriptionA
TranslateCharsetInfo
Rectangle
GetOutlineTextMetricsW
ModifyWorldTransform
RectVisible
GetCurrentObject
GetCharWidth32W
StrokePath
GetFontData
CheckColorsInGamut
CreateHatchBrush
ExtFloodFill
CreateScalableFontResourceW
RectInRegion
SetGraphicsMode
GetColorSpace
GdiFlush
SetPixelFormat
ChoosePixelFormat
GetTextColor
StrokeAndFillPath
StretchDIBits
GetRasterizerCaps
GetMiterLimit
SetFontEnumeration
GetEnhMetaFileBits
DeleteObject
EndDoc
SetPixel
GetViewportExtEx
EnumFontsA
TextOutW
GetWinMetaFileBits
RestoreDC
AbortPath
CreateRoundRectRgn
Ellipse
IntersectClipRect
SetICMProfileA
GetCharABCWidthsA
SetEnhMetaFileBits
GetLayout
MoveToEx
Pie
CreateICA
ScaleViewportExtEx
GetRegionData
CreateScalableFontResourceA
CreatePatternBrush
GetOutlineTextMetricsA
CreateColorSpaceW
EnumFontFamiliesExA
SetTextAlign
GetPixelFormat
SetWindowExtEx
GetWindowExtEx
SetArcDirection
GetLogColorSpaceA
SwapBuffers
FillPath
GetBitmapDimensionEx
CreateDIBSection
DeleteEnhMetaFile
SelectObject
SetWinMetaFileBits
GetCharacterPlacementW
PolyPolyline
GetStretchBltMode
CreateFontA
GetDIBColorTable
SaveDC
GetEnhMetaFilePaletteEntries
CreateDCW
GetMetaRgn
GetGlyphOutline
CreatePen
SelectClipRgn
GetTextCharset
CombineRgn
StartPage
GetCharWidthFloatA
DeviceCapabilitiesExW
GetPolyFillMode
GetBitmapBits
SetPixelV
CreateBitmapIndirect
AddFontResourceW
GetTextFaceW
CloseMetaFile
CopyEnhMetaFileW
GetCharWidth32A
GetTextExtentExPointA
SetBoundsRect
SetMapMode
CreateBitmap
GdiPlayJournal
SetBitmapBits
EnumICMProfilesW
StartDocW
GetDeviceGammaRamp
GetDCOrgEx
PolyPolygon
TextOutA
GetBkMode
GetFontLanguageInfo
GetCharWidthW
SetMiterLimit
GetNearestColor
GetAspectRatioFilterEx
GetObjectType
SetBkMode
GetCharWidthFloatW
GetTextAlign
SetColorSpace
SetLayout
GetROP2
SetICMProfileW
ExtCreateRegion
SetDeviceGammaRamp
CreatePenIndirect
SetMetaRgn
LineTo
Polygon
GetCharacterPlacementA
Polyline
ExtTextOutA
UpdateICMRegKeyW
DeleteDC
GdiGetBatchLimit
PolyTextOutW
shell32
ExtractIconW
ShellExecuteExA
ShellAboutA
SHGetDiskFreeSpaceA
CheckEscapesW
CommandLineToArgvW
DragAcceptFiles
ExtractIconExA
DragQueryFileW
SheGetDirA
ExtractAssociatedIconExA
SHGetNewLinkInfo
SHBrowseForFolderW
SHGetSpecialFolderPathA
SHGetPathFromIDList
RealShellExecuteExA
SHFileOperationW
ShellHookProc
ShellExecuteExW
SHGetFileInfoW
ShellExecuteEx
ExtractIconExW
SheSetCurDrive
SHAddToRecentDocs
SHGetPathFromIDListA
DoEnvironmentSubstA
ShellExecuteA
DragQueryFileAorW
SHFileOperationA
SHFileOperation
RealShellExecuteExW
ExtractAssociatedIconExW
SheChangeDirA
ExtractAssociatedIconW
SHFormatDrive
SHChangeNotify
DuplicateIcon
SHLoadInProc
SHGetDataFromIDListA
SHGetDesktopFolder
SHInvokePrinterCommandA
SHQueryRecycleBinW
DragQueryPoint
DragQueryFileA
wininet
DeleteUrlCacheContainerA
SetUrlCacheConfigInfoA
InternetSetCookieW
CreateUrlCacheContainerA
ShowClientAuthCerts
InternetGoOnlineA
CommitUrlCacheEntryA
CreateUrlCacheEntryA
InternetShowSecurityInfoByURL
RetrieveUrlCacheEntryFileW
FtpSetCurrentDirectoryA
InternetSetCookieA
SetUrlCacheEntryInfoW
GopherOpenFileA
SetUrlCacheEntryGroupW
InternetUnlockRequestFile
FtpCreateDirectoryA
InternetGetConnectedStateExA
InternetInitializeAutoProxyDll
FtpGetCurrentDirectoryW
UpdateUrlCacheContentPath
FtpCommandA
FtpPutFileA
HttpCheckDavCompliance
FindFirstUrlCacheEntryW
InternetCloseHandle
UnlockUrlCacheEntryFileA
InternetAutodial
GopherCreateLocatorW
InternetAlgIdToStringW
InternetTimeToSystemTimeW
RetrieveUrlCacheEntryStreamW
FtpRenameFileA
GetUrlCacheEntryInfoW
GopherCreateLocatorA
FtpRemoveDirectoryA
HttpOpenRequestA
SetUrlCacheEntryGroupA
SetUrlCacheEntryInfoA
InternetGetLastResponseInfoW
InternetTimeToSystemTimeA
DeleteUrlCacheContainerW
FindFirstUrlCacheEntryA
UnlockUrlCacheEntryFileW
FindNextUrlCacheEntryExW
InternetConfirmZoneCrossing
GetUrlCacheConfigInfoA
FtpOpenFileA
InternetSecurityProtocolToStringW
FindNextUrlCacheContainerW
HttpAddRequestHeadersW
SetUrlCacheConfigInfoW
InternetGetConnectedStateExW
CreateUrlCacheContainerW
GetUrlCacheEntryInfoExA
InternetGetCookieW
FindNextUrlCacheEntryA
LoadUrlCacheContent
InternetGetConnectedStateEx
FindFirstUrlCacheEntryExW
FtpFindFirstFileA
SetUrlCacheHeaderData
FindFirstUrlCacheContainerW
RegisterUrlCacheNotification
HttpQueryInfoA
InternetSetDialStateW
HttpSendRequestExA
FtpCreateDirectoryW
InternetAttemptConnect
FtpFindFirstFileW
InternetSetOptionExW
InternetFindNextFileW
InternetGetLastResponseInfoA
InternetQueryOptionW
GetUrlCacheEntryInfoExW
InternetAlgIdToStringA
HttpOpenRequestW
RetrieveUrlCacheEntryFileA
RunOnceUrlCache
FtpPutFileW
FtpGetFileEx
UnlockUrlCacheEntryFile
InternetSecurityProtocolToStringA
InternetCanonicalizeUrlA
SetUrlCacheEntryGroup
GetUrlCacheGroupAttributeW
CreateUrlCacheEntryW
IncrementUrlCacheHeaderData
InternetTimeFromSystemTimeW
UnlockUrlCacheEntryStream
InternetSetOptionW
IsUrlCacheEntryExpiredW
HttpAddRequestHeadersA
FindFirstUrlCacheContainerA
InternetQueryOptionA
FindFirstUrlCacheEntryExA
InternetCanonicalizeUrlW
InternetConnectA
HttpSendRequestExW
FtpDeleteFileW
FindNextUrlCacheEntryW
InternetGetCertByURLA
ReadUrlCacheEntryStream
InternetReadFile
InternetConnectW
InternetDialA
InternetOpenUrlA
ShowX509EncodedCertificate
InternetTimeFromSystemTimeA
InternetWriteFileExW
GopherOpenFileW
InternetOpenUrlW
InternetGetCertByURL
FindFirstUrlCacheGroup
InternetReadFileExW
InternetCheckConnectionW
GopherFindFirstFileW
InternetFindNextFileA
HttpQueryInfoW
DetectAutoProxyUrl
InternetGoOnlineW
DeleteIE3Cache
FindNextUrlCacheContainerA
InternetGoOnline
FtpPutFileEx
DeleteUrlCacheEntryA
InternetCombineUrlA
GopherGetAttributeA
FindNextUrlCacheEntryExA
FtpGetCurrentDirectoryA
InternetWriteFileExA
GopherGetLocatorTypeA
advapi32
RegSaveKeyW
RegReplaceKeyA
RevertToSelf
GetUserNameW
CryptSetKeyParam
DuplicateTokenEx
LogonUserA
CryptDuplicateHash
CryptSetProviderW
LookupPrivilegeValueW
CryptSignHashW
CryptGetDefaultProviderW
RegQueryValueA
RegCreateKeyW
RegEnumValueW
GetUserNameA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 261KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ