Static task
static1
Behavioral task
behavioral1
Sample
aaa30edc7e6ebdb1d4eacb3040c03b612065bb391f380e369cd016e7884b44c7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
aaa30edc7e6ebdb1d4eacb3040c03b612065bb391f380e369cd016e7884b44c7.exe
Resource
win10v2004-20230220-en
General
-
Target
aaa30edc7e6ebdb1d4eacb3040c03b612065bb391f380e369cd016e7884b44c7
-
Size
629KB
-
MD5
f7e1e876d0ca38840465c0095130f724
-
SHA1
f2450066d9fc568557a2410a8d35c523d3eca959
-
SHA256
aaa30edc7e6ebdb1d4eacb3040c03b612065bb391f380e369cd016e7884b44c7
-
SHA512
aff90baa53ab824b6fa21e875ed03c4e99836261bfc98e84d973aa364781db114ee718af38e6401419d196cc514156cde44e62697a7569ce9f8c7466e545db4d
-
SSDEEP
12288:O08+WMarw+aHO9UrCGQ5ei/nu17Qa8Hx9G9N5:1Pf+j/nckG5
Malware Config
Signatures
Files
-
aaa30edc7e6ebdb1d4eacb3040c03b612065bb391f380e369cd016e7884b44c7.exe windows x86
4f4eeba261dc3b76029c51c23a29c1b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
SetEvent
FindResourceW
LoadResource
LockResource
SizeofResource
FreeResource
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
GetLocalTime
MoveFileExW
Sleep
GetFileAttributesExW
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
CreateMutexW
GetTickCount
SetEndOfFile
WriteConsoleW
SetStdHandle
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetTimeZoneInformation
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetStdHandle
GetProcessHeap
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
GetCommandLineW
LoadLibraryExW
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
HeapReAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
HeapAlloc
HeapFree
GetStringTypeW
WaitForSingleObject
GetLastError
DeleteFileW
GetModuleFileNameW
GetFileAttributesW
MultiByteToWideChar
CloseHandle
GetFileType
GetCurrentDirectoryW
CreateFileW
ReadFile
WideCharToMultiByte
WriteFile
CreateDirectoryW
GetCurrentProcess
SetFilePointer
FreeLibrary
LoadLibraryW
GetProcAddress
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
HeapSize
SetEnvironmentVariableA
user32
EndPaint
PtInRect
SetCursor
DrawTextW
SendMessageW
InvalidateRect
SetCapture
ReleaseCapture
IsWindow
IsRectEmpty
IntersectRect
LoadCursorW
GetWindowLongW
PostMessageW
SetWindowPos
SetWindowRgn
GetWindowRect
GetClientRect
MapWindowPoints
RedrawWindow
SetFocus
GetWindow
GetParent
CallWindowProcW
SystemParametersInfoW
DestroyWindow
DefWindowProcW
GetClassInfoExW
LoadIconW
RegisterClassExW
CreateWindowExW
SetPropW
GetPropW
PostQuitMessage
FindWindowW
SetForegroundWindow
ShowWindow
RemovePropW
OffsetRect
UpdateLayeredWindow
FillRect
ReleaseDC
GetDC
wsprintfW
BeginPaint
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
GetDesktopWindow
GetLastActivePopup
SetActiveWindow
EnableWindow
IsWindowEnabled
IsIconic
SetWindowLongW
gdi32
BitBlt
StretchBlt
SetBkMode
CreateCompatibleDC
DeleteDC
CreateRoundRectRgn
ExtSelectClipRgn
CreateRectRgnIndirect
CreateFontIndirectW
GetStockObject
GetObjectW
DeleteObject
SetTextColor
SelectObject
CreateDIBSection
advapi32
OpenProcessToken
GetLengthSid
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserW
shell32
SHGetFolderPathW
SHGetSpecialFolderPathW
ord165
ShellExecuteW
comctl32
_TrackMouseEvent
wininet
HttpQueryInfoA
InternetConnectA
InternetCrackUrlA
InternetCloseHandle
InternetSetOptionA
InternetQueryOptionA
InternetSetStatusCallbackA
InternetReadFileExA
HttpAddRequestHeadersA
InternetSetStatusCallbackW
InternetOpenA
HttpSendRequestA
InternetReadFile
HttpOpenRequestA
urlmon
UrlMkGetSessionOption
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
Sections
.text Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 468KB - Virtual size: 467KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ