Static task
static1
Behavioral task
behavioral1
Sample
0a116e945e99327fa632ad2cdd0f0b3a273884d5572a82abb438b3e67570c4e0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0a116e945e99327fa632ad2cdd0f0b3a273884d5572a82abb438b3e67570c4e0.exe
Resource
win10v2004-20221111-en
General
-
Target
0a116e945e99327fa632ad2cdd0f0b3a273884d5572a82abb438b3e67570c4e0
-
Size
1.5MB
-
MD5
541c061086f63c6d043da0022b10eca3
-
SHA1
fc1816b7e515048d08cf88bd1a8a0b1b02d03229
-
SHA256
0a116e945e99327fa632ad2cdd0f0b3a273884d5572a82abb438b3e67570c4e0
-
SHA512
a5c6264f4fb43af325a4e0fb2e6c3e12a52d56d6f597058cece4a9a43f2d62a1753515e90a8699584c0a5968f6f138662a32bb77099dfd2103e7d7c1c2182316
-
SSDEEP
24576:w+vu/jwbnhQGsHsTgPo5W/PLNhHKR6u7j1BwsHUkkWhBIpwd6piTPaLKmgIFZirB:/uehQGsHsTgPo5W/PBhHtuV0MzFPa+wW
Malware Config
Signatures
Files
-
0a116e945e99327fa632ad2cdd0f0b3a273884d5572a82abb438b3e67570c4e0.exe windows x86
9d9629ca2110ed98a010179197e9c98d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
LocalFree
GetComputerNameW
CreateProcessW
GetCurrentProcess
GetModuleFileNameW
CreateMutexW
GetFileAttributesW
ReleaseMutex
Sleep
GetLocalTime
GetWindowsDirectoryW
GetProcAddress
ExitProcess
GetModuleHandleW
InterlockedDecrement
MulDiv
CreateDirectoryW
ReadFile
SetFileTime
SetFilePointer
LocalFileTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
SetEndOfFile
HeapSize
ReadConsoleW
WriteConsoleW
GetTimeZoneInformation
GetProcessHeap
GetSystemDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetVersionExW
CreateFileW
WaitForSingleObject
WriteFile
GetVolumeInformationW
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetFullPathNameW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapFree
HeapReAlloc
HeapAlloc
GetACP
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
FileTimeToSystemTime
GetTempPathW
SetEnvironmentVariableA
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
FreeLibrary
LoadLibraryExW
RaiseException
user32
ShowWindow
RegisterClassW
DispatchMessageW
CreateWindowExW
MessageBoxW
GetClientRect
wsprintfW
LoadCursorW
PostMessageW
DefWindowProcW
GetMessageW
ReleaseDC
SetRect
GetDC
TranslateMessage
gdi32
GetDeviceCaps
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
ConvertSidToStringSidW
LookupAccountNameW
shell32
SHCreateDirectoryExW
SHGetFolderPathW
ole32
CoInitializeEx
OleInitialize
OleSetContainedObject
OleCreate
OleLockRunning
CoUninitialize
CoCreateInstance
oleaut32
SysFreeString
VariantClear
SysAllocString
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
iphlpapi
GetAdaptersInfo
shlwapi
PathRemoveExtensionW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
Sections
.text Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 758KB - Virtual size: 758KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ