Static task
static1
Behavioral task
behavioral1
Sample
5d147e8c6e7c000624f05f97ed8cc6555a61a4e7d9b230667db638493b7902ae.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
5d147e8c6e7c000624f05f97ed8cc6555a61a4e7d9b230667db638493b7902ae.exe
Resource
win10v2004-20220722-en
General
-
Target
5d147e8c6e7c000624f05f97ed8cc6555a61a4e7d9b230667db638493b7902ae
-
Size
398KB
-
MD5
21575d09d7966e1a20e396dfcb616470
-
SHA1
2c55a668606926c88cb00141d4c6c2d2c50a749a
-
SHA256
5d147e8c6e7c000624f05f97ed8cc6555a61a4e7d9b230667db638493b7902ae
-
SHA512
dc30292b3a7769a2d4e4c0cda98c184ce40b908f2b38ad838a0979f11bdb40d77cfd9166a0f54126236b168016ff31e32378a277dbee43013d536ad9be2fa761
-
SSDEEP
6144:r6TgTtyM7lLkIl459qxBGWhG3nysV9P2OxHLvicWp4SwTQ1v7jMfx7sQRTYhw2/k:mTgTtV7lLo9wpG3HVh7icnSy4vG7Md/k
Malware Config
Signatures
Files
-
5d147e8c6e7c000624f05f97ed8cc6555a61a4e7d9b230667db638493b7902ae.exe windows x86
3bf5c727e360f25e185e011e0f59171e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_UP_SYSTEM_ONLY
Imports
kernel32
lstrlenA
FindFirstFileA
GetCommandLineA
GetLogicalDrives
GetLastError
GetConsoleWindow
Sleep
SetConsoleTitleA
GetTickCount
GetCurrentProcessId
GetConsoleTitleA
ExpandEnvironmentStringsA
LocalFree
CloseHandle
OpenProcess
CreateFileW
FlushFileBuffers
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
RtlUnwind
FindNextFileA
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
FindClose
GetStdHandle
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
lstrcatA
GetProcAddress
GlobalLock
GlobalUnlock
MulDiv
WaitForSingleObject
GetModuleHandleA
EnterCriticalSection
GetModuleFileNameW
WriteFile
ExitProcess
GetModuleHandleW
HeapCreate
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
HeapAlloc
HeapFree
RaiseException
LoadLibraryA
user32
GetWindowThreadProcessId
FindWindowA
PostMessageA
DispatchMessageW
TranslateMessage
GetMessageW
EnumChildWindows
FindWindowExA
EnableMenuItem
LoadStringA
SendMessageA
CreateAcceleratorTableA
SystemParametersInfoA
GetWindow
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
wsprintfA
GetDlgItem
SetWindowPos
CountClipboardFormats
CharToOemA
TrackMouseEvent
CreatePopupMenu
CopyRect
FillRect
SetWindowTextA
KillTimer
ExitWindowsEx
GetParent
IsClipboardFormatAvailable
MessageBoxA
OpenClipboard
GetClipboardData
CloseClipboard
InvalidateRect
BeginPaint
GetClientRect
LoadBitmapA
GetSystemMetrics
GetDC
ReleaseDC
SetScrollPos
SetCursor
EndPaint
gdi32
CreateFontW
CreateFontA
SetTextColor
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
advapi32
CryptEnumProviderTypesA
ole32
WriteClassStg
StgOpenStorage
ReadClassStg
StgCreateDocfile
psapi
EnumProcessModules
GetModuleBaseNameA
GetModuleFileNameExA
winmm
waveInGetDevCapsA
waveInReset
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
shlwapi
StrStrIA
StrToIntExA
imm32
ImmAssociateContext
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fast Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flash Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ