Static task
static1
Behavioral task
behavioral1
Sample
5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468.exe
Resource
win7-en-20211208
General
-
Target
5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468
-
Size
286KB
-
MD5
350c0b08ec0452a070bbed6fc730b17c
-
SHA1
15d23e2d535bf6540491fdaae6ef8d617ec47930
-
SHA256
5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468
-
SHA512
725cd3062b4aa68eb93a7bc1a3f7318f84cf003a296e2bfe11b884579ea8a0f6e25d86821fce3c4c40ae0e5fb67ab167aafafb65e9d7451c9923327eb9123a3c
-
SSDEEP
6144:BPMFNxNdI3M8vhT9EfS9mG4LZnIkp7LffVwwKfT8a:1CATpBgGWDfqwKfTh
Malware Config
Signatures
Files
-
5766bffa91f87cd08582fac05209c5d8d9356ad88e15499038dc624c0ccbc468.exe windows x86
31bb56aeabedaccf3eee59aab202a5d0
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
winscard
SCardControl
user32
ReleaseCapture
OffsetRect
GetMenuStringW
LoadStringW
MoveWindow
UnregisterClassA
GetMenu
LoadIconA
SetActiveWindow
GetClientRect
SetWindowTextW
DestroyIcon
PostMessageW
RegisterClassW
GetSubMenu
GetCursorPos
MessageBeep
DefWindowProcW
ReleaseDC
SetWindowPos
CheckMenuItem
DrawFocusRect
SendMessageW
SetWindowLongW
PtInRect
CreateWindowExA
GetActiveWindow
SetTimer
DestroyMenu
CreateWindowExW
kernel32
TlsGetValue
CompareStringW
CompareStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
GetLocaleInfoW
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapReAlloc
HeapAlloc
InitializeCriticalSection
LoadLibraryExA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
OutputDebugStringA
Sleep
GetACP
GetCPInfo
EnterCriticalSection
FatalAppExitA
VirtualAlloc
GetCurrentThread
IsDebuggerPresent
GetCommandLineA
GetTickCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetVersionExA
GetLastError
GetProcAddress
LoadLibraryW
ExitProcess
GetOEMCP
SetEvent
lstrlenW
GetCurrentProcess
FormatMessageW
CloseHandle
LeaveCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
RtlUnwind
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
SetEnvironmentVariableA
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
ole32
OleCreate
OleInitialize
CoUninitialize
Sections
.text Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ