Static task
static1
Behavioral task
behavioral1
Sample
ac2fcf97e5ab2163970948a3ecf2270943cbe1de11d052e4a972fe2787a67c47.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac2fcf97e5ab2163970948a3ecf2270943cbe1de11d052e4a972fe2787a67c47.exe
Resource
win10v2004-20220812-en
General
-
Target
ac2fcf97e5ab2163970948a3ecf2270943cbe1de11d052e4a972fe2787a67c47
-
Size
82KB
-
MD5
2c86fa98acf0770826994dd4b94cce83
-
SHA1
48e0c52b3ea8bf47d1e6892f45742aed974883cb
-
SHA256
ac2fcf97e5ab2163970948a3ecf2270943cbe1de11d052e4a972fe2787a67c47
-
SHA512
1f293e9fb5731773745aa65e16f616fa2e3ca3d8af943e908b681fd6ad96cec86f7d66cfafb5f8d7f578db05b28f725d27c1f5b3e19e3fa5adb0821b08410374
-
SSDEEP
1536:+5Zqz8O4R2M2Q2MxBiCBKehQFfC4Ng2boxWk7DJ:+ycxpBntX2boxWk7t
Malware Config
Signatures
Files
-
ac2fcf97e5ab2163970948a3ecf2270943cbe1de11d052e4a972fe2787a67c47.exe windows x86
256ad35a8b89d4dcf638e06cbf164dd3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadWritePtr
GetSystemDirectoryA
MultiByteToWideChar
lstrlenW
GetCurrentProcessId
InterlockedDecrement
DeleteFileA
SetFileAttributesA
GetFileAttributesA
Sleep
CreateProcessA
CreateMutexA
ExitProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcatA
GetTempPathA
GlobalFree
GlobalAlloc
lstrcpyA
OpenFileMappingA
OpenMutexA
GetLocalTime
GetModuleFileNameA
CopyFileA
GetVersionExA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
GetTickCount
GetModuleHandleA
HeapFree
HeapAlloc
GetCommandLineA
GetCommandLineW
FreeResource
GetCurrentProcess
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
FindClose
FindNextFileA
FindFirstFileA
GetVolumeInformationA
GetCurrentDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
RaiseException
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
HeapDestroy
VirtualAlloc
HeapSize
VirtualFree
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetStartupInfoA
RtlUnwind
HeapReAlloc
FileTimeToSystemTime
lstrcpynA
GetLastError
LocalFree
GetFileSize
SetFilePointer
ReadFile
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
LockResource
lstrlenA
user32
GetWindowThreadProcessId
SendMessageTimeoutA
RegisterWindowMessageA
EnumChildWindows
wsprintfA
GetClassNameA
KillTimer
FindWindowExA
PostMessageA
IsWindow
DefWindowProcA
PostQuitMessage
CreateWindowExA
SetTimer
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetDesktopWindow
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
SHChangeNotify
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteExA
ole32
CoCreateInstance
OleRun
CoTaskMemFree
CoInitialize
CoUninitialize
oleaut32
SysAllocString
SysFreeString
VariantClear
SysAllocStringLen
oleacc
ObjectFromLresult
wininet
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
psapi
GetModuleFileNameExA
netapi32
Netbios
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ