Static task
static1
Behavioral task
behavioral1
Sample
2a20a44ed8e159d33befa37fe38a6dea0af6018a7af284dd4a2f918cf21c9034.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2a20a44ed8e159d33befa37fe38a6dea0af6018a7af284dd4a2f918cf21c9034.exe
Resource
win10v2004-20230220-en
General
-
Target
2a20a44ed8e159d33befa37fe38a6dea0af6018a7af284dd4a2f918cf21c9034
-
Size
278KB
-
MD5
c32fd99433037ab3d125f1a27ce65b57
-
SHA1
4f8e22d7fb369ffbd86cce160bac5dd7894e5d9c
-
SHA256
2a20a44ed8e159d33befa37fe38a6dea0af6018a7af284dd4a2f918cf21c9034
-
SHA512
1dc0869bfe0ff02fafcf7a2ed346bb461e00802ffc919a54753179b1d66c374d00a6fdcdb7662a5601e76639750d5086aca81cebfacddb08c771976fe34a50ab
-
SSDEEP
6144:WNU52i69UOzESKjwQ/E+4y48hnP5IdJa2:W6EgSK8mE+4yZnP5I
Malware Config
Signatures
Files
-
2a20a44ed8e159d33befa37fe38a6dea0af6018a7af284dd4a2f918cf21c9034.exe windows x86
2deb6239702b9f4e607b62187ca7a524
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
HeapCreate
HeapDestroy
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStdHandle
VirtualAlloc
HeapReAlloc
HeapSize
RaiseException
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
ExitProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetErrorMode
GetModuleHandleW
GetCurrentProcess
FlushFileBuffers
MoveFileA
GetOEMCP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
LocalFree
GlobalFlags
MulDiv
WritePrivateProfileStringA
GlobalFree
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
InterlockedExchange
GlobalAlloc
lstrcmpA
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
FreeResource
lstrlenA
GlobalLock
GlobalUnlock
GetCurrentProcessId
GetModuleHandleA
GlobalGetAtomNameA
GlobalAddAtomA
GetLastError
SetLastError
MultiByteToWideChar
LocalFileTimeToFileTime
CloseHandle
GetCurrentDirectoryA
ReadFile
WriteFile
SetFileTime
SystemTimeToFileTime
SetFilePointer
CreateFileA
LockResource
LoadLibraryA
FindClose
GetProcAddress
FindFirstFileA
CreateDirectoryA
lstrlenW
GetFileAttributesA
SizeofResource
Sleep
WideCharToMultiByte
FindResourceExA
LoadResource
GetConsoleCP
FindResourceA
GetProcessHeap
user32
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextA
GetForegroundWindow
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
PostQuitMessage
PtInRect
GetDC
ReleaseDC
GetWindowRect
GetSystemMetrics
GetClassNameA
GetSysColor
DestroyMenu
WinHelpA
SetWindowPos
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
GetDlgItem
SetWindowLongA
GetDlgCtrlID
GetKeyState
LoadIconA
SetCursor
PeekMessageA
GetCapture
GetParent
SetActiveWindow
IsWindowVisible
IsIconic
SendMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetClassInfoA
CopyRect
GetMenu
GetLastActivePopup
PostMessageA
SetMenu
GetDesktopWindow
GetWindow
ShowWindow
GetWindowLongA
IsWindow
wsprintfA
RegisterClipboardFormatA
UnregisterClassA
EnableWindow
UpdateWindow
GetSysColorBrush
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
LoadCursorA
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
CreateDialogIndirectParamA
GetNextDlgTabItem
GetClientRect
EndDialog
gdi32
GetStockObject
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
PtVisible
RectVisible
TextOutA
Escape
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteDC
GetObjectA
DeleteObject
SelectObject
SetViewportOrgEx
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantChangeType
VariantInit
VariantClear
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ