Static task
static1
Behavioral task
behavioral1
Sample
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe
Resource
win10v2004-20220721-en
General
-
Target
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4
-
Size
326KB
-
MD5
4d9cb097be72db103d482abb4658685a
-
SHA1
cf1eaf87b24fc59a60db2317f26a5d75809dfd50
-
SHA256
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4
-
SHA512
072dc309eba55774d63e243b8fe8f22f257fcb74d71da92d98bf625c1caefc6063079c1953eb981aec08065981a5c28de4253c7f0e6dd4db01c8931c320f16cf
-
SSDEEP
6144:G33tj8BBIQq3JuCPBz9OzbO41XW+hHntnyVg/ucTM6ZkK5:G3dj2q3gUcb/cCntyVgGc115
Malware Config
Signatures
Files
-
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe windows x86
7e5bacc6d801d3616a8cca4d411d884e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgCtrlID
MsgWaitForMultipleObjectsEx
GetClipboardViewer
GetMessageExtraInfo
RedrawWindow
ShowCursor
GetMenuItemCount
LoadIconA
TrackPopupMenu
CloseClipboard
IsWindow
GetInputState
IsMenu
RegisterHotKey
CopyIcon
ole32
OleInitialize
CoTaskMemFree
OleUninitialize
CoCreateInstance
advapi32
RegCloseKey
RegDeleteKeyW
gdi32
GetTextColor
GetEnhMetaFileDescriptionW
GdiTransparentBlt
ResetDCW
FrameRgn
PlayMetaFile
GetFontLanguageInfo
GetOutlineTextMetricsW
Escape
MaskBlt
SetLayout
GetWindowExtEx
MoveToEx
GetCharABCWidthsFloatW
GetFontData
GetCharWidthA
ExtFloodFill
GetCharWidthFloatA
CreatePatternBrush
CreateSolidBrush
GetCharWidthW
GetWindowOrgEx
ArcTo
CreateCompatibleDC
GetDIBits
GetMapMode
netapi32
NetUserAdd
kernel32
GetLocaleInfoA
LoadLibraryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SizeofResource
AreFileApisANSI
GetEnvironmentStringsW
LocalUnlock
GetTapeStatus
CreateMemoryResourceNotification
DecodePointer
GetCurrentProcessId
GetEnvironmentStrings
CreateDirectoryW
CreateEventW
CreateFileW
CreateProcessW
DeleteFileW
EnumCalendarInfoW
FindResourceW
FormatMessageW
GetCPInfo
GetCurrentProcess
GetDiskFreeSpaceW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetUserDefaultLangID
GetVersionExW
GetWindowsDirectoryW
LoadLibraryW
LoadResource
LockResource
ReadFile
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SignalObjectAndWait
VirtualProtect
WaitForSingleObject
CloseHandle
GetStdHandle
RaiseException
RtlUnwind
UnhandledExceptionFilter
WriteFile
ExitProcess
FindClose
FindFirstFileW
FreeLibrary
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetThreadLocale
LoadLibraryExW
lstrcpynW
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
VirtualQuery
GetCurrentThreadId
GetVersion
QueryPerformanceCounter
GetTickCount
VirtualAlloc
VirtualFree
Sleep
GetACP
SetPriorityClass
GetSystemInfo
SetCurrentDirectoryW
GetCommandLineW
HeapReAlloc
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
DeleteCriticalSection
HeapCreate
HeapFree
GetModuleHandleA
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ