Static task
static1
Behavioral task
behavioral1
Sample
8a0302b70a5cd02a09602ceae154264ffdceab8acaeb9e4c3c5da7a79fc69c56.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8a0302b70a5cd02a09602ceae154264ffdceab8acaeb9e4c3c5da7a79fc69c56.exe
Resource
win10v2004-20221111-en
General
-
Target
8a0302b70a5cd02a09602ceae154264ffdceab8acaeb9e4c3c5da7a79fc69c56
-
Size
276KB
-
MD5
a7c0d515eb85249a60883ed725d39bb6
-
SHA1
b9a3982b41e34adba1de1e399b5f0ae2a567b631
-
SHA256
8a0302b70a5cd02a09602ceae154264ffdceab8acaeb9e4c3c5da7a79fc69c56
-
SHA512
b197733a2df67ce71faa1f14e349f8142646f91dead0cedaecdb03e2dbb30146b7928de6fc48fefa3d48cbbf759c7c21dbdb5fe8c291fdb7b30374e3396ef634
-
SSDEEP
6144:+Jmh+RKST14mTjH0I2pB8gVOvVB/U4m7aat5kVB:UJjTtjUTT8gVWB/U4Saafk
Malware Config
Signatures
Files
-
8a0302b70a5cd02a09602ceae154264ffdceab8acaeb9e4c3c5da7a79fc69c56.exe windows x86
8ebe3eb2348c23d131a7918d4347f2da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupCopyOEMInfA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceInfoListDetailA
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoListExA
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInfoA
comctl32
ord17
winspool.drv
ClosePrinter
OpenPrinterA
kernel32
InitializeCriticalSection
SetHandleCount
UnhandledExceptionFilter
lstrcmpiA
SetFilePointer
TerminateProcess
RaiseException
ExitProcess
GlobalHandle
HeapCreate
VirtualFree
LeaveCriticalSection
GetCommandLineA
GlobalGetAtomNameA
RtlUnwind
LocalReAlloc
FreeLibrary
InterlockedDecrement
CloseHandle
FreeEnvironmentStringsW
DeleteCriticalSection
HeapFree
GetStringTypeA
SetLastError
WriteFile
lstrcatA
GetEnvironmentStringsA
GlobalAlloc
GetProcAddress
EnterCriticalSection
lstrlenA
TlsGetValue
GlobalUnlock
MultiByteToWideChar
GetOEMCP
IsBadCodePtr
SetUnhandledExceptionFilter
HeapReAlloc
HeapDestroy
GetLocaleInfoA
GlobalLock
GlobalReAlloc
GetACP
GetVersion
lstrcpynA
GlobalFree
InterlockedIncrement
GlobalFindAtomA
VirtualAlloc
GetModuleFileNameA
lstrcmpA
HeapSize
LocalAlloc
IsBadWritePtr
GetEnvironmentStringsW
lstrcpyA
HeapAlloc
GetFileType
LCMapStringW
GlobalFlags
TlsSetValue
LoadLibraryA
GetLastError
GetCurrentProcess
GlobalDeleteAtom
GetCurrentThreadId
FreeEnvironmentStringsA
LCMapStringA
GetStartupInfoA
GetModuleHandleA
LocalFree
GetCPInfo
GetStringTypeW
GlobalAddAtomA
TlsAlloc
IsBadReadPtr
WideCharToMultiByte
FlushFileBuffers
gdi32
PtVisible
GetClipBox
SetViewportExtEx
RectVisible
DeleteObject
OffsetViewportOrgEx
SaveDC
SetBkColor
SetWindowExtEx
ScaleViewportExtEx
ScaleWindowExtEx
RestoreDC
ExtTextOutA
GetStockObject
SetViewportOrgEx
SetTextColor
TextOutA
GetObjectA
GetDeviceCaps
SelectObject
user32
GetPropA
GetFocus
ModifyMenuA
SetMenuItemBitmaps
SendMessageA
DestroyWindow
GetClassNameA
RegisterClassA
GetMenuItemID
GetWindowRect
GetMessagePos
SetWindowPos
GetWindow
CopyRect
LoadStringA
PostMessageA
GetTopWindow
CreateWindowExA
MessageBoxA
GetClassLongA
SetWindowTextA
GetClientRect
PostQuitMessage
DefWindowProcA
SetPropA
GetForegroundWindow
CallWindowProcA
CharNextA
GetCapture
IsIconic
GetSysColor
ReleaseDC
SystemParametersInfoA
DispatchMessageA
SetForegroundWindow
LoadCursorA
GetMessageTime
EnableWindow
GetDlgCtrlID
PeekMessageA
GetWindowPlacement
GetSubMenu
GetParent
RemovePropA
GetLastActivePopup
GetSysColorBrush
GetMenu
GetMenuItemCount
LoadBitmapA
TabbedTextOutA
GetDC
GetWindowLongA
GetWindowTextA
WinHelpA
CheckMenuItem
EnableMenuItem
IsWindowEnabled
GrayStringA
GetKeyState
wsprintfA
MapWindowPoints
DestroyMenu
PtInRect
RegisterWindowMessageA
GetMenuState
LoadIconA
GetSystemMetrics
DrawTextA
GetClassInfoA
GetNextDlgTabItem
SetWindowLongA
GetDlgItem
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ