Static task
static1
Behavioral task
behavioral1
Sample
a313c0c87cfca9bd0c20638983f2ec3cb63b2cc82159d212add66996acec0a88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a313c0c87cfca9bd0c20638983f2ec3cb63b2cc82159d212add66996acec0a88.exe
Resource
win10v2004-20220901-en
General
-
Target
a313c0c87cfca9bd0c20638983f2ec3cb63b2cc82159d212add66996acec0a88
-
Size
2.1MB
-
MD5
cec6827738b85d230265fd018874f8cb
-
SHA1
bf020c7bb2adf0c55e86544512a206fcb8beff1b
-
SHA256
a313c0c87cfca9bd0c20638983f2ec3cb63b2cc82159d212add66996acec0a88
-
SHA512
f1e11ae04aa97dd2f941e1171965002e76f51cae73bd4a47daec745618ac44b87e89d85910a6735d992698d73ba2748342613cc13ea9f6c8e36781773424796c
-
SSDEEP
49152:vhxYX5U4OxebmMYEL1sBEGPVfzrby6HQ3tRhAy10d25:Z540eqMYMsBrPVz9HQdTAyyK
Malware Config
Signatures
Files
-
a313c0c87cfca9bd0c20638983f2ec3cb63b2cc82159d212add66996acec0a88.exe windows x86
07c1613427d7f91d930b3f8ce92279e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameW
SetConsoleMode
LocalSize
GetTempFileNameA
ExitProcess
SetThreadAffinityMask
SetCommTimeouts
LoadLibraryExW
CreateDirectoryExA
GenerateConsoleCtrlEvent
EnumResourceNamesA
GlobalFree
SetEndOfFile
MoveFileExA
CreateDirectoryW
GetTempPathW
_lclose
GetThreadContext
ReadFileScatter
EnumSystemCodePagesA
SetupComm
_lopen
GetCommandLineW
UnhandledExceptionFilter
GetUserDefaultLCID
DeleteFiber
GetCompressedFileSizeW
SearchPathW
GetLogicalDriveStringsA
SetNamedPipeHandleState
FindCloseChangeNotification
GetDriveTypeW
CreateWaitableTimerA
WriteConsoleOutputW
LCMapStringA
WaitNamedPipeA
SetProcessWorkingSetSize
SystemTimeToFileTime
OpenSemaphoreW
ReadConsoleOutputA
InitializeCriticalSection
GetCurrentDirectoryW
CreateMutexA
GetCurrentProcess
lstrcmpiW
CreateDirectoryA
GetFileAttributesA
CreateIoCompletionPort
LocalFileTimeToFileTime
EnumCalendarInfoA
user32
GetCaretBlinkTime
GetMenuCheckMarkDimensions
GetWindowTextA
GetWindowThreadProcessId
SetWindowPos
CreateIcon
SystemParametersInfoW
PostMessageA
GetSystemMetrics
RegisterDeviceNotificationW
GetSystemMenu
CreateCursor
GetClientRect
OemToCharBuffW
GetUserObjectInformationW
GetKeyboardLayoutNameA
FindWindowExA
CloseWindowStation
GetMessageA
TabbedTextOutW
GetWindowRect
GetFocus
RegisterWindowMessageW
GetLastActivePopup
ClipCursor
FindWindowExW
GetScrollBarInfo
ToUnicode
SendInput
GetClassLongW
GetCapture
DrawCaption
ActivateKeyboardLayout
GetCursor
SetWindowsHookW
CharPrevA
SetWindowContextHelpId
GetMenuInfo
SendDlgItemMessageW
gdi32
IntersectClipRect
GetTextMetricsW
DescribePixelFormat
CreateEnhMetaFileA
SetMapperFlags
RectVisible
GetPolyFillMode
advapi32
GetTokenInformation
RegDeleteValueA
LookupAccountNameW
OpenSCManagerA
ImpersonateNamedPipeClient
RegSetValueA
RegRestoreKeyA
CryptReleaseContext
MapGenericMask
RegDeleteKeyW
CryptAcquireContextA
CreateProcessAsUserA
EnumDependentServicesA
RegUnLoadKeyW
RegSetKeySecurity
InitializeAcl
CryptSetHashParam
InitializeSecurityDescriptor
RegRestoreKeyW
GetSidIdentifierAuthority
LookupAccountSidW
CryptVerifySignatureW
GetSecurityDescriptorLength
SetPrivateObjectSecurity
GetSidSubAuthority
RegQueryInfoKeyA
OpenSCManagerW
LookupPrivilegeValueW
LogonUserW
SetTokenInformation
RevertToSelf
GetSecurityDescriptorDacl
RegLoadKeyW
SetSecurityDescriptorGroup
CloseEventLog
RegOpenKeyExW
RegNotifyChangeKeyValue
GetServiceDisplayNameA
SetNamedSecurityInfoA
RegSetValueExA
NotifyBootConfigStatus
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
DragAcceptFiles
SHGetSpecialFolderPathW
ole32
GetClassFile
StgCreateStorageEx
oleaut32
LoadTypeLi
SafeArrayGetElement
SetErrorInfo
SysAllocStringLen
VariantChangeType
SafeArrayRedim
SysFreeString
Sections
.text Size: 4KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ