Static task
static1
Behavioral task
behavioral1
Sample
5a3294a4c4fc2c8dd97d8397b0ec354213b02828390093b626a19ad47d6be2d5.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5a3294a4c4fc2c8dd97d8397b0ec354213b02828390093b626a19ad47d6be2d5.exe
Resource
win10v2004-20220721-en
General
-
Target
5a3294a4c4fc2c8dd97d8397b0ec354213b02828390093b626a19ad47d6be2d5
-
Size
404KB
-
MD5
6e39c75f1defb2020783df539a05c327
-
SHA1
e899ef1ade27bcbc4479c0bea01c586b8ac9d1b1
-
SHA256
5a3294a4c4fc2c8dd97d8397b0ec354213b02828390093b626a19ad47d6be2d5
-
SHA512
c5d84f0d351eae549389403fcc88a7d731031888c2033fc3cf6f6eb685209dca78c2f34002b4afcfeaf495736b5ed08b93c544debefeeb7d63b0ee9ca61179de
-
SSDEEP
12288:IzQUu9O1vB8OKB+Wc6dVC/drvJ4CzlUBfmb:IU9O1GO++edV2B4CzlUBm
Malware Config
Signatures
Files
-
5a3294a4c4fc2c8dd97d8397b0ec354213b02828390093b626a19ad47d6be2d5.exe windows x86
f98c59ce4b7e305c6d18acba91fdc14d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapSize
MultiByteToWideChar
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
FlushFileBuffers
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetCommandLineW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
DeleteCriticalSection
CreateFileW
GetLastError
GetCurrentThread
SetThreadPriority
GetThreadPriority
WriteFile
WaitForSingleObject
CloseHandle
HeapCreate
HeapAlloc
GetProcAddress
GetSystemTimeAsFileTime
EnumSystemCodePagesW
GetNumberOfConsoleInputEvents
SetLastError
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LoadLibraryA
GetEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
IsProcessorFeaturePresent
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
ExitProcess
GetModuleHandleW
RtlUnwind
RaiseException
HeapFree
user32
EmptyClipboard
CloseClipboard
EndDialog
GetParent
SetWindowTextA
GetSystemMenu
CopyImage
DestroyMenu
EnableMenuItem
LoadStringA
GetMessageA
InsertMenuA
RegisterClassA
EndPaint
SetClipboardData
GetWindowTextA
GetDC
FillRect
ReleaseDC
OpenClipboard
GetDlgItemTextW
LoadCursorA
CreateMenu
CreateWindowExA
PostThreadMessageA
MessageBoxA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SendMessageA
EnableWindow
CreateDialogParamA
SetDlgItemTextA
DestroyWindow
DestroyAcceleratorTable
gdi32
CreateSolidBrush
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
CreatePalette
StartDocA
StartPage
TextOutA
EndPage
EndDoc
GetTextMetricsA
GetStockObject
PatBlt
CombineTransform
comdlg32
PrintDlgA
advapi32
CryptEnumProviderTypesA
shell32
CommandLineToArgvW
ole32
CoSuspendClassObjects
CoInitialize
psapi
GetProcessMemoryInfo
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
crypt32
CryptEncodeObjectEx
rpcrt4
UuidCreate
RpcStringFreeA
UuidToStringA
gdiplus
GdiplusStartup
GdipFree
GdipAlloc
GdipLoadImageFromFile
GdipDisposeImage
GdipSaveImageToFile
GdipCloneImage
GdiplusShutdown
setupapi
SetupDiGetClassDevsA
powrprof
GetPwrDiskSpindownRange
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ