Static task
static1
Behavioral task
behavioral1
Sample
a7feb8288ab897c54567c1ad6fd136cf11db5bd92ed77e211c28a5e3b31c7fc9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7feb8288ab897c54567c1ad6fd136cf11db5bd92ed77e211c28a5e3b31c7fc9.exe
Resource
win10v2004-20220812-en
General
-
Target
a7feb8288ab897c54567c1ad6fd136cf11db5bd92ed77e211c28a5e3b31c7fc9
-
Size
82KB
-
MD5
dd3a07900c3b0ec1a185bb5a76769553
-
SHA1
b7c9f9097e562d2f8d3795e8c5f63c8976aac59e
-
SHA256
a7feb8288ab897c54567c1ad6fd136cf11db5bd92ed77e211c28a5e3b31c7fc9
-
SHA512
38f9f5535d0559412ab700e41a87fcf9b6b3324b43a77abfa904254bd8f63b869f0f37d648ce7a5ce5eca4560d52e678c4c92ccbceec538d1382cafe65360fdd
-
SSDEEP
1536:l5Fqz8O4R2M2Q2MxB9CBKehQFfC9Ng2boxWrVDL:lOcxKBntk2boxWrV/
Malware Config
Signatures
Files
-
a7feb8288ab897c54567c1ad6fd136cf11db5bd92ed77e211c28a5e3b31c7fc9.exe windows x86
256ad35a8b89d4dcf638e06cbf164dd3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadWritePtr
GetSystemDirectoryA
MultiByteToWideChar
lstrlenW
GetCurrentProcessId
InterlockedDecrement
DeleteFileA
SetFileAttributesA
GetFileAttributesA
Sleep
CreateProcessA
CreateMutexA
ExitProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcatA
GetTempPathA
GlobalFree
GlobalAlloc
lstrcpyA
OpenFileMappingA
OpenMutexA
GetLocalTime
GetModuleFileNameA
CopyFileA
GetVersionExA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
GetTickCount
GetModuleHandleA
HeapFree
HeapAlloc
GetCommandLineA
GetCommandLineW
FreeResource
GetCurrentProcess
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
FindClose
FindNextFileA
FindFirstFileA
GetVolumeInformationA
GetCurrentDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
RaiseException
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
HeapDestroy
VirtualAlloc
HeapSize
VirtualFree
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetStartupInfoA
RtlUnwind
HeapReAlloc
FileTimeToSystemTime
lstrcpynA
GetLastError
LocalFree
GetFileSize
SetFilePointer
ReadFile
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
LockResource
lstrlenA
user32
GetWindowThreadProcessId
SendMessageTimeoutA
RegisterWindowMessageA
EnumChildWindows
wsprintfA
GetClassNameA
KillTimer
FindWindowExA
PostMessageA
IsWindow
DefWindowProcA
PostQuitMessage
CreateWindowExA
SetTimer
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetDesktopWindow
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
SHChangeNotify
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteExA
ole32
CoCreateInstance
OleRun
CoTaskMemFree
CoInitialize
CoUninitialize
oleaut32
SysAllocString
SysFreeString
VariantClear
SysAllocStringLen
oleacc
ObjectFromLresult
wininet
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
psapi
GetModuleFileNameExA
netapi32
Netbios
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ