Static task
static1
Behavioral task
behavioral1
Sample
aacb4fa32f4ef4bdef81656ad53203ed0960d69b0f3993c547f83cac3ad7b5c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aacb4fa32f4ef4bdef81656ad53203ed0960d69b0f3993c547f83cac3ad7b5c6.exe
Resource
win10v2004-20220812-en
General
-
Target
aacb4fa32f4ef4bdef81656ad53203ed0960d69b0f3993c547f83cac3ad7b5c6
-
Size
525KB
-
MD5
84be0081690083f702602b64d38b6734
-
SHA1
5c36003ca8d0635baade2a7a300f6ae68c75c232
-
SHA256
aacb4fa32f4ef4bdef81656ad53203ed0960d69b0f3993c547f83cac3ad7b5c6
-
SHA512
ec28f5fccfb5e4f3c96c764fd4178e9b2ce1746845137ebc0c09e5926623e267a0882cdc158dd2a643f4bd041ca403e2f97b6e776dc65a057ce83d9b8a91bfec
-
SSDEEP
12288:o0jf/0baIphRVlSslK9gjJ2yO+eJKHMBEz4hV6B5CctZ:PjXzIt2vq87VEsbs5jtZ
Malware Config
Signatures
Files
-
aacb4fa32f4ef4bdef81656ad53203ed0960d69b0f3993c547f83cac3ad7b5c6.exe windows x86
f91bf2db756262d830dde2b984dd0c06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
DeferWindowPos
DdeAbandonTransaction
SendNotifyMessageW
DdeAccessData
EmptyClipboard
GetKeyNameTextA
TranslateMDISysAccel
ImpersonateDdeClientWindow
MonitorFromPoint
AttachThreadInput
BringWindowToTop
GetAltTabInfo
ChangeDisplaySettingsA
MapWindowPoints
RegisterClassA
SetWindowLongW
SetMenuInfo
RegisterClassExA
MessageBoxExA
GetKeyboardType
DdeInitializeA
GetOpenClipboardWindow
GetScrollBarInfo
OpenDesktopW
SetWinEventHook
LoadCursorW
DrawCaption
kernel32
GetModuleFileNameA
SetConsoleCursorInfo
ExpandEnvironmentStringsW
DeleteCriticalSection
HeapDestroy
ConvertDefaultLocale
UnhandledExceptionFilter
GetCurrentProcess
GetFileType
ExitProcess
InterlockedDecrement
QueryPerformanceCounter
GetOEMCP
GetEnvironmentStringsW
CopyFileA
SetUnhandledExceptionFilter
GetCurrentThreadId
GetProcessHeap
GetACP
LCMapStringW
OpenMutexA
GetCPInfo
GetLocaleInfoW
GetProfileIntA
GetProcAddress
WideCharToMultiByte
SetThreadIdealProcessor
CreateMutexA
LoadLibraryA
SetConsoleCtrlHandler
Sleep
GetStdHandle
WriteFile
MapViewOfFile
LCMapStringA
MultiByteToWideChar
TransactNamedPipe
HeapFree
GetLogicalDrives
EnterCriticalSection
CreateFileA
TerminateProcess
CloseHandle
TlsGetValue
GetTimeFormatA
GetSystemTimeAsFileTime
GetDateFormatA
GetConsoleMode
GetTimeZoneInformation
GetModuleHandleA
GetConsoleCP
ReadFile
GetCurrentProcessId
TlsFree
OpenMutexW
InterlockedIncrement
EnumSystemCodePagesA
InitializeCriticalSection
GetConsoleOutputCP
FreeEnvironmentStringsW
SetStdHandle
GetEnvironmentStrings
SetLastError
HeapSize
WriteConsoleW
TlsAlloc
GetLastError
HeapAlloc
GetSystemDefaultLangID
FlushFileBuffers
IsValidCodePage
VirtualAlloc
GetCurrentDirectoryA
GetStringTypeA
LeaveCriticalSection
RtlUnwind
CompareStringA
GetModuleHandleW
VirtualQuery
CompareStringW
GetLogicalDriveStringsA
HeapCreate
SetThreadPriority
FreeLibrary
HeapReAlloc
GetPrivateProfileSectionA
GetUserDefaultLCID
GetCurrentThread
GetThreadContext
GetVersionExA
GetStartupInfoA
SetEnvironmentVariableA
WriteConsoleA
SetFilePointer
CreateRemoteThread
TlsSetValue
GetStringTypeW
GetLocaleInfoA
SetHandleCount
GetCommandLineA
IsValidLocale
EnumSystemLocalesA
InterlockedExchange
GetTickCount
VirtualFree
IsDebuggerPresent
FreeEnvironmentStringsA
shell32
DragQueryFileW
ShellAboutA
ExtractIconW
InternalExtractIconListW
SHGetDesktopFolder
wininet
InternetCreateUrlA
InternetDial
UpdateUrlCacheContentPath
SetUrlCacheEntryGroupA
InternetFortezzaCommand
InternetQueryFortezzaStatus
CommitUrlCacheEntryW
Sections
.text Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ