Static task
static1
Behavioral task
behavioral1
Sample
5a7317430c3d973b9aff26401cf33b68fce667936b02d00c8d2bcef4ff7c1e1b.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
5a7317430c3d973b9aff26401cf33b68fce667936b02d00c8d2bcef4ff7c1e1b.exe
Resource
win10v2004-20220721-en
General
-
Target
5a7317430c3d973b9aff26401cf33b68fce667936b02d00c8d2bcef4ff7c1e1b
-
Size
603KB
-
MD5
0d0676faabe04d0dd85e5379ef246313
-
SHA1
261bad2856f0623a5a5d8f079170c4ff1d2547d7
-
SHA256
5a7317430c3d973b9aff26401cf33b68fce667936b02d00c8d2bcef4ff7c1e1b
-
SHA512
94081ddd322928ee5a837eae60649093cffec9946c01698dafe4077051ff43829626d69360b8b1b772bf7a7b025498699d4f21a882a8608e084a436593e05fc1
-
SSDEEP
12288:6eeWaQehiM7jTD13IFjrhLytIwPWNrYlkdsFizVaG:gQui0JYTyXPsElLFKVB
Malware Config
Signatures
Files
-
5a7317430c3d973b9aff26401cf33b68fce667936b02d00c8d2bcef4ff7c1e1b.exe windows x86
2f9fe3a35f386d6f2e368652274946c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetStdHandle
GetLastError
GetCurrentDirectoryW
GetProcAddress
LoadLibraryA
CreateFileMappingA
GetConsoleScreenBufferInfo
CreateEventW
GetSystemInfo
GetModuleHandleA
FillConsoleOutputAttribute
GetCurrentThreadId
CloseHandle
lstrcpyA
InterlockedIncrement
IsDebuggerPresent
CreateFileW
FlushFileBuffers
SetStdHandle
VirtualQuery
GetProcessHeap
LCMapStringW
SetConsoleCursorPosition
HeapQueryInformation
HeapSize
HeapReAlloc
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
WaitForSingleObject
FreeLibrary
IsProcessorFeaturePresent
LoadLibraryW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapCreate
ReadConsoleInputA
FlushViewOfFile
HeapFree
FlushConsoleInputBuffer
InterlockedDecrement
HeapAlloc
UnmapViewOfFile
MapViewOfFile
lstrlenA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
DecodePointer
EncodePointer
EnterCriticalSection
IsBadReadPtr
GetFileSize
CreateFileA
HeapValidate
GetStringTypeW
FillConsoleOutputCharacterA
WriteFile
GetModuleFileNameW
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
LocalFree
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
GetModuleHandleW
user32
GetWindowThreadProcessId
UpdateWindow
SendMessageW
SetWindowTextA
GetClassLongA
DispatchMessageW
DestroyWindow
GetSystemMenu
GetWindowRect
GetMessageW
SetForegroundWindow
IsClipboardFormatAvailable
AttachThreadInput
GetForegroundWindow
wsprintfA
GetWindowTextLengthA
SendMessageA
TranslateMessage
LoadCursorW
LoadIconW
GetWindowTextA
SetWindowLongA
MessageBoxA
BringWindowToTop
GetWindowLongA
SystemParametersInfoW
CreateWindowExA
EnableMenuItem
SetClassLongA
GetDlgItem
ShowWindow
CreateWindowExW
DispatchMessageA
SystemParametersInfoA
RegisterClassW
gdi32
CreateFontIndirectW
SelectObject
advapi32
AccessCheck
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHChangeNotify
ole32
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysFreeString
VariantChangeType
VariantInit
VariantCopy
VariantClear
SysAllocString
ws2_32
WSAStartup
shlwapi
StrChrA
comctl32
InitCommonControlsEx
traffic
TcEnumerateFlows
sensapi
IsNetworkAlive
Sections
.text Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ