Static task
static1
Behavioral task
behavioral1
Sample
5cf6532159dfe7db1aff20c0a5389470750168892e4d0c0afa0c42c52b1afc44.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
5cf6532159dfe7db1aff20c0a5389470750168892e4d0c0afa0c42c52b1afc44.exe
Resource
win10v2004-20220414-en
General
-
Target
5cf6532159dfe7db1aff20c0a5389470750168892e4d0c0afa0c42c52b1afc44
-
Size
206KB
-
MD5
724f2e153e7eccf2e8610bd62b7c23d5
-
SHA1
953556457ba02ee62316366da4cd94dd4c87ecb1
-
SHA256
5cf6532159dfe7db1aff20c0a5389470750168892e4d0c0afa0c42c52b1afc44
-
SHA512
4209e45ce447a50b61b34869f3c24d500ed393ae33991e29cb5dcf9a310e02c8ae61538017ce9cd53ee39d38fd530ac3373736c9f71685ab2b8e8f751596e7c6
-
SSDEEP
6144:vPXi/0epp2pLzh6VuAN4ZviH9nv+Bqzz:3W0epp25UVdeqHVv+Bq/
Malware Config
Signatures
Files
-
5cf6532159dfe7db1aff20c0a5389470750168892e4d0c0afa0c42c52b1afc44.exe windows x86
f0a7d5b5123e8b1b9ac6ccaa738cf0ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
GetPrivateProfileSectionW
GetCPInfo
TlsAlloc
VirtualAlloc
RaiseException
MulDiv
SizeofResource
VirtualFree
GetFileSize
GetPrivateProfileIntW
GetOEMCP
GetDateFormatA
EnumResourceLanguagesW
GlobalAlloc
GetDateFormatW
GetVolumeInformationW
GetCurrentProcessId
SetEnvironmentVariableA
GetPrivateProfileStringW
GlobalFlags
HeapAlloc
CopyFileW
GetDriveTypeW
ExpandEnvironmentStringsW
GetModuleFileNameW
GetLocaleInfoA
lstrcatW
IsBadWritePtr
InitializeCriticalSection
QueryPerformanceFrequency
FindNextFileW
FreeEnvironmentStringsA
DeleteCriticalSection
SetStdHandle
FreeEnvironmentStringsW
LocalReAlloc
GetTempPathW
ExitProcess
WritePrivateProfileStringW
GetCurrentProcess
GetStringTypeW
GetVersion
LCMapStringA
RtlUnwind
QueryPerformanceCounter
FindFirstFileW
lstrcmpW
GetLocalTime
TlsGetValue
FormatMessageW
GetFullPathNameW
HeapDestroy
lstrcmpA
VirtualQuery
GetACP
IsBadCodePtr
IsValidCodePage
GetThreadLocale
GetStartupInfoW
ReadFile
SetUnhandledExceptionFilter
GetCurrentThread
WaitForMultipleObjects
LockResource
GetTickCount
LockFile
FindClose
GetTimeFormatW
LocalAlloc
GetLocaleInfoW
HeapSize
GetCurrentThreadId
CreateProcessW
HeapReAlloc
VirtualProtect
CreateDirectoryW
GetVersionExA
DeleteFileW
DuplicateHandle
HeapCreate
LCMapStringW
SetHandleCount
FileTimeToSystemTime
LoadResource
TlsFree
WriteFile
GetEnvironmentStringsW
TerminateProcess
GlobalFree
IsBadReadPtr
GetSystemTimeAsFileTime
LoadLibraryW
GlobalFindAtomW
GetFileType
CompareStringA
MapViewOfFile
FileTimeToLocalFileTime
CancelWaitableTimer
GetProcessHeap
ActivateActCtx
GetEnvironmentVariableA
OpenWaitableTimerA
OpenWaitableTimerW
AddAtomW
CancelIo
InterlockedDecrement
SetEndOfFile
GlobalHandle
lstrcpyW
GlobalDeleteAtom
UnhandledExceptionFilter
GetStringTypeA
GetCommandLineA
GetUserDefaultLCID
CreateWaitableTimerW
GetModuleHandleW
TlsSetValue
SetFileAttributesW
LeaveCriticalSection
SetFilePointer
InterlockedIncrement
InterlockedExchange
EnterCriticalSection
GetTimeZoneInformation
CompareStringW
UnmapViewOfFile
UnlockFile
GetStdHandle
GetFileTime
GetVersionExW
lstrcpynW
GetFileAttributesW
FlushFileBuffers
GetSystemInfo
GetTimeFormatA
SetWaitableTimer
SetErrorMode
HeapFree
CloseHandle
GetFileAttributesA
GetStartupInfoA
MultiByteToWideChar
SetLastError
LocalFree
lstrcpyA
lstrcpynA
GetLastError
LoadLibraryA
CreateMutexA
GetModuleFileNameA
GetProcAddress
lstrlenW
GetFullPathNameA
GetModuleHandleA
FreeLibrary
WideCharToMultiByte
AreFileApisANSI
CreateFileW
lstrlenA
user32
EndPaint
CreateDialogIndirectParamW
GetWindowPlacement
PostMessageW
ValidateRect
EqualRect
GetNextDlgTabItem
RegisterClassW
RemovePropW
GetWindowDC
GetClassInfoExW
CheckMenuItem
CopyRect
CallWindowProcW
InvalidateRgn
GetAsyncKeyState
GetClassNameW
GetKeyState
SystemParametersInfoA
GetMessagePos
PeekMessageW
ClientToScreen
DrawTextExW
SetFocus
EndDialog
GetTopWindow
WinHelpW
IntersectRect
IsWindowVisible
IsWindowUnicode
wsprintfW
CharLowerW
SendDlgItemMessageW
SetWindowTextW
GetWindowTextLengthW
GetActiveWindow
SetCursor
IsWindowEnabled
RegisterWindowMessageW
GetPropW
SetWindowLongW
SetWindowPos
GetCapture
UnregisterClassW
SetWindowContextHelpId
SetDlgItemTextW
GetNextDlgGroupItem
TranslateMessage
GetWindowTextW
GetSysColorBrush
BeginPaint
TabbedTextOutW
MapDialogRect
GetClassLongW
SetActiveWindow
GetMenuCheckMarkDimensions
MapWindowPoints
WindowFromPoint
DispatchMessageW
SendDlgItemMessageA
InvalidateRect
DrawTextW
ScreenToClient
SetPropW
GetDesktopWindow
GrayStringA
OffsetRect
SetRect
GetWindowRect
EnableWindow
IsZoomed
PtInRect
DrawTextA
TabbedTextOutA
GetMenuState
PostQuitMessage
GetMessageTime
IsDialogMessageW
SetMenuItemBitmaps
GetWindowLongW
GetFocus
GetForegroundWindow
AdjustWindowRectEx
GetWindow
CreateWindowExW
ReleaseCapture
FillRect
GetParent
GetSystemMenu
SendMessageA
GetSystemMetrics
SetCapture
UpdateWindow
SetForegroundWindow
GetWindowTextA
SetWindowTextA
EnumChildWindows
IsRectEmpty
IsChild
MessageBoxW
GrayStringW
GetDlgItemTextW
GetClassInfoW
DefWindowProcA
IsWindow
GetDlgCtrlID
gdi32
GetObjectW
CreateDIBSection
DeleteDC
TextOutW
CreateCompatibleDC
SetBkColor
CreateBitmap
CreateRectRgnIndirect
ExtTextOutW
TextOutA
SetDIBColorTable
SetMapMode
GetDeviceCaps
DeleteObject
RestoreDC
GetViewportExtEx
GetWindowExtEx
SaveDC
GetTextExtentPoint32W
PtVisible
CreatePalette
PtInRegion
CreatePolygonRgn
LPtoDP
GetTextColor
RectVisible
SetPixel
CombineRgn
CreateRectRgn
BitBlt
CreateFontIndirectA
GetClipBox
Polyline
GetObjectA
SetRectRgn
DPtoLP
comdlg32
GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW
shell32
SHBrowseForFolderW
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetMalloc
SHBindToParent
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteA
SHGetFolderLocation
SHFileOperationW
comctl32
ImageList_Destroy
PropertySheetW
ImageList_ReplaceIcon
ord17
ImageList_SetBkColor
ImageList_AddMasked
ImageList_Create
CreatePropertySheetPageW
_TrackMouseEvent
InitCommonControlsEx
DestroyPropertySheetPage
shlwapi
PathStripToRootW
StrRetToBufW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
mpr
WNetCancelConnectionW
WNetAddConnection2W
oledlg
OleUIBusyW
gdiplus
GdiplusStartup
GdipGetImagePaletteSize
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipBitmapUnlockBits
GdipCreateBitmapFromFileICM
GdipGetImagePixelFormat
GdipGetImageWidth
GdipGetImagePalette
GdipCloneImage
GdipFree
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdiplusShutdown
GdipAlloc
GdipDeleteGraphics
msvcrt
__CxxFrameHandler
_except_handler3
_mbscmp
_exit
exit
_strdup
_adjust_fdiv
__set_app_type
_mbsicmp
_onexit
_XcptFilter
__p__fmode
_setmbcp
_initterm
?terminate@@YAXXZ
_vsnprintf
__dllonexit
_controlfp
_splitpath
__p__commode
_acmdln
free
__setusermatherr
_CxxThrowException
__getmainargs
??1type_info@@UAE@XZ
_CIsin
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ