Static task
static1
Behavioral task
behavioral1
Sample
5f90ec8324a3be0c7da857e54a613161296b3c083e8a668a44c3fd352571439e.exe
Resource
win7-20220718-en
General
-
Target
5f90ec8324a3be0c7da857e54a613161296b3c083e8a668a44c3fd352571439e
-
Size
160KB
-
MD5
a4a862ae8115eedc3ca313c5e68ed85c
-
SHA1
1aabc75c61d760b6185f800bd7654b0083f88d03
-
SHA256
5f90ec8324a3be0c7da857e54a613161296b3c083e8a668a44c3fd352571439e
-
SHA512
6e4b57d87b0eb2c3fa3c6c2af5e79d40344730390ea0fbde1ec077cd310e68983fe9b132bf0c64c43d7659f9675da45646b9015df14c637d902ce1376a2144d1
-
SSDEEP
3072:3V1U+s6/uc8Nb0tGqE7BIuAkR1CKC3lWJUGQ8tnIS/Cbd7HOvET8Z5pb:3rUh6/WVWuA41CpXHRdLOsT8Z
Malware Config
Signatures
Files
-
5f90ec8324a3be0c7da857e54a613161296b3c083e8a668a44c3fd352571439e.exe windows x86
f133be0e749c199bcec36cc66fc06428
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ScrollWindow
LockWorkStation
DrawIconEx
IsCharAlphaA
ChildWindowFromPoint
SetDlgItemTextA
SetCursor
powrprof
GetCurrentPowerPolicies
advapi32
UnlockServiceDatabase
CryptDestroyKey
MakeAbsoluteSD
netapi32
NetSessionEnum
shell32
SHGetFolderPathA
opengl32
glTranslatef
glGetString
msi
ord30
ord29
oleaut32
VarCat
VarCyCmp
SafeArrayDestroyData
pdh
PdhAddCounterW
setupapi
SetupOpenAppendInfFileW
SetupDiDestroyDriverInfoList
kernel32
lstrlenA
CopyFileW
FlsGetValue
FlsFree
GetVolumeInformationA
RegisterWaitForSingleObjectEx
CreateFileW
MoveFileW
secur32
InitializeSecurityContextW
iphlpapi
GetRTTAndHopCount
winmm
midiOutUnprepareHeader
gdi32
GetOutlineTextMetricsW
GetTextMetricsW
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bYl Size: 20KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ