Static task
static1
Behavioral task
behavioral1
Sample
5d8cda8367fec454320c4ada9011a0a65277505a4daad34da24bf768457ff514.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5d8cda8367fec454320c4ada9011a0a65277505a4daad34da24bf768457ff514.exe
Resource
win10v2004-20220721-en
General
-
Target
5d8cda8367fec454320c4ada9011a0a65277505a4daad34da24bf768457ff514
-
Size
508KB
-
MD5
5978aacb831bffcba163c62ab77563fa
-
SHA1
97d325ea7f0d196f60269854ee090a119940908a
-
SHA256
5d8cda8367fec454320c4ada9011a0a65277505a4daad34da24bf768457ff514
-
SHA512
68d6226ff7cf443efb33b04beec9a99ddd3137bc6d4759dc36e4623619742aae712562af08b58148e30d05d2e34c8cbcb9f57d5434cdeebeb8b9158c4c6f03a3
-
SSDEEP
6144:d7NXWm5dvKBNON6KGJRwx+H7OqAONEQ29pDqmxNBVAeAFx4FkvS4D9Pyq5u6ln8Y:fWm+S6zU+bdQgrrvS9qcyr1kUr
Malware Config
Signatures
Files
-
5d8cda8367fec454320c4ada9011a0a65277505a4daad34da24bf768457ff514.exe windows x86
79e9afed6c0512547341b4b78d53c3d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
SetWindowLongA
DispatchMessageA
IsWindow
ShowWindow
SetWindowTextA
SetTimer
DestroyWindow
SendMessageA
FindWindowExA
GetClientRect
GetDlgItem
TranslateMessage
CopyRect
wvsprintfA
CharToOemBuffA
LoadStringA
GetWindowTextA
GetWindow
OemToCharBuffA
KillTimer
PostMessageA
MessageBoxW
LoadStringW
DialogBoxParamW
CharUpperW
CharUpperA
SetWindowTextW
DialogBoxParamA
EndDialog
SetWindowPos
GetWindowLongA
GetSystemMetrics
MessageBoxA
shell32
SHFileOperationA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetFileInfoA
SHGetSpecialFolderLocation
advapi32
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetProcessHeap
GetVersionExA
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
GetCPInfo
GetCurrentDirectoryA
GetStdHandle
GetFileType
DosDateTimeToFileTime
GlobalFlags
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
EnumSystemLocalesA
CompareStringA
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
TlsSetValue
SetLastError
WideCharToMultiByte
GetModuleHandleA
GetCurrentProcess
GetProcAddress
GetLocaleInfoW
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
TlsFree
DeleteCriticalSection
GetACP
GetOEMCP
GetLocaleInfoA
CompareStringW
SetEnvironmentVariableA
CreateFileA
SetFileAttributesW
GetCommandLineA
LoadLibraryA
SetFilePointer
ExitProcess
GetTickCount
GetModuleFileNameA
SetFileAttributesA
MoveFileA
GetFullPathNameA
GetFileAttributesA
SetFileTime
LCMapStringW
Sleep
GetLastError
CloseHandle
GetUserDefaultLCID
GetCurrentThreadId
ReadFile
WriteFile
CreateFileW
FreeLibrary
SetEndOfFile
MultiByteToWideChar
GetFileAttributesW
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 391KB - Virtual size: 526KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ