Static task
static1
Behavioral task
behavioral1
Sample
2a9ba315e0a147f3e8d9a3e8da7448f3a92263ef8fe6f3054ff9bc2e34deaabd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a9ba315e0a147f3e8d9a3e8da7448f3a92263ef8fe6f3054ff9bc2e34deaabd.exe
Resource
win10v2004-20220812-en
General
-
Target
2a9ba315e0a147f3e8d9a3e8da7448f3a92263ef8fe6f3054ff9bc2e34deaabd
-
Size
274KB
-
MD5
f9310be9aa3f417ce23d477f1acb67ff
-
SHA1
c597e659e40e75a8f34088babd8a9e5bfa7db5fb
-
SHA256
2a9ba315e0a147f3e8d9a3e8da7448f3a92263ef8fe6f3054ff9bc2e34deaabd
-
SHA512
2a925d8111417c6725e01da47762984a8af1bdd2502defbc6682b5479aff9343639a7a067ea003bcf82e9d567ad6c77ed0fa609ab2375cc8f5166eee16a7230a
-
SSDEEP
6144:roDbw7zK/NNwCUrRK+u2fIB5yUBtNc/ih:roDbw/KLwC4RKr2f05R
Malware Config
Signatures
Files
-
2a9ba315e0a147f3e8d9a3e8da7448f3a92263ef8fe6f3054ff9bc2e34deaabd.exe windows x86
b18a0511d47f3d7f506bc50fa1cce4d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
GetProcessVersion
GlobalFlags
SizeofResource
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
SetStdHandle
GetFileType
TerminateProcess
GetTimeZoneInformation
GetACP
HeapReAlloc
FileTimeToSystemTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetErrorMode
GetProfileStringA
GetFileTime
GetFileSize
GetFileAttributesA
MulDiv
GetCurrentThread
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CreateEventA
lstrcmpA
GlobalFree
LockResource
FindResourceA
LoadResource
SetLastError
FormatMessageA
LocalFree
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
CreateMutexA
DeviceIoControl
ClearCommError
WaitForMultipleObjects
WaitCommEvent
SetCommMask
GetOverlappedResult
GetVersionExA
WaitForSingleObject
CreateThread
ResetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetEvent
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
GetModuleHandleA
GetModuleFileNameA
WriteFile
ReadFile
GetLastError
CreateFileA
Sleep
CloseHandle
SetCommTimeouts
GetCommState
SetCommState
PurgeComm
WritePrivateProfileStringA
HeapSize
user32
InvalidateRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
MessageBeep
GetKeyState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetLastActivePopup
LoadStringA
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
GetParent
MessageBoxA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
GetFocus
IsWindowEnabled
IsWindow
SetFocus
CharUpperA
wsprintfA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetDlgCtrlID
EnableWindow
DefDlgProcA
IsWindowUnicode
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetWindow
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
CreateWindowExA
SetWindowTextA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateFontA
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize
olepro32
ord253
oleaut32
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
SysStringLen
SysAllocString
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE