Static task
static1
Behavioral task
behavioral1
Sample
0fa9e991cc86133cf4f5321913e75b616041e29aabad55ffae74cab02f6f3cdc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0fa9e991cc86133cf4f5321913e75b616041e29aabad55ffae74cab02f6f3cdc.exe
Resource
win10v2004-20221111-en
General
-
Target
0fa9e991cc86133cf4f5321913e75b616041e29aabad55ffae74cab02f6f3cdc
-
Size
614KB
-
MD5
1c4c1bb9b5a8a3807fa2249b900ed4bf
-
SHA1
a59a112dd2924388d718e7bcacf0a0331b0dd867
-
SHA256
0fa9e991cc86133cf4f5321913e75b616041e29aabad55ffae74cab02f6f3cdc
-
SHA512
048db546260b4c632c01fa63cf87f4342a326d9aedac014c3f786590040f1ea4136693c5baf2d12fc95d2b8adf4c3fbcd5631f37292d02525e98f75e171510c5
-
SSDEEP
12288:WZLwrTd+z4fGpLOfBofQ1iX/math/rgYdB4mklf3Ys6Mcw9LhrxV+IVagH7CgZT:WZLqMlfh+AlBShf3R6E9N9VxCgx
Malware Config
Signatures
Files
-
0fa9e991cc86133cf4f5321913e75b616041e29aabad55ffae74cab02f6f3cdc.exe windows x86
5a36a1f8d2ecf51b960e32d735e9ca2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
GetExitCodeThread
WaitForSingleObject
CreateThread
GetLastError
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
VirtualFree
GetModuleHandleW
GetProcAddress
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceExA
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
MultiByteToWideChar
GetLocaleInfoW
lstrlenA
lstrcmpiW
GetEnvironmentVariableW
GlobalMemoryStatusEx
VirtualAlloc
WideCharToMultiByte
ExpandEnvironmentStringsW
lstrcmpW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
CompareFileTime
GetSystemTimeAsFileTime
Sleep
GetTempPathW
SetEnvironmentVariableW
CloseHandle
WriteFile
CreateFileW
GetDriveTypeW
SetCurrentDirectoryW
GetExitCodeProcess
GetModuleFileNameW
GetCommandLineW
GetVersionExW
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
MulDiv
TerminateThread
ResumeThread
SuspendThread
LocalFree
lstrcpyW
FormatMessageW
GetSystemDirectoryW
DeleteCriticalSection
GetFileSize
SetFilePointer
ReadFile
SetFileTime
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
GetModuleHandleA
SetLastError
SetFileAttributesW
GetDiskFreeSpaceExW
lstrcatW
ExitProcess
lstrlenW
GetStartupInfoA
user32
EndDialog
CharUpperW
SetTimer
DestroyWindow
KillTimer
DispatchMessageW
wsprintfW
GetSystemMenu
EnableMenuItem
IsWindow
EnableWindow
MessageBeep
LoadIconW
LoadImageW
wvsprintfW
DefWindowProcW
CallWindowProcW
GetWindowDC
DrawIconEx
DialogBoxIndirectParamW
GetWindow
ClientToScreen
GetDC
DrawTextW
ReleaseDC
ShowWindow
SetWindowPos
SystemParametersInfoW
SetFocus
GetWindowLongW
SetWindowLongW
GetSystemMetrics
GetClientRect
GetDlgItem
GetKeyState
wsprintfA
MessageBoxA
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
GetMessageW
GetWindowRect
ScreenToClient
CreateWindowExW
SendMessageW
GetParent
gdi32
CreateFontIndirectW
SelectObject
GetDeviceCaps
GetObjectW
DeleteObject
shell32
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetMalloc
ole32
CoCreateInstance
CoInitialize
oleaut32
VariantClear
SysAllocString
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
_wcsnicmp
memcpy
malloc
memmove
_wtol
free
memcmp
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_controlfp
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ