Static task
static1
Behavioral task
behavioral1
Sample
543707503d3a052fa3ea4fce22951de48ae06ff1d676eea59d5bc6cf360d9588.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
543707503d3a052fa3ea4fce22951de48ae06ff1d676eea59d5bc6cf360d9588.exe
Resource
win10v2004-20220812-en
General
-
Target
543707503d3a052fa3ea4fce22951de48ae06ff1d676eea59d5bc6cf360d9588
-
Size
147KB
-
MD5
571794e48764e3f2af9868db36e6e643
-
SHA1
26150add015f44e009e149ef5267a6661cd6c471
-
SHA256
543707503d3a052fa3ea4fce22951de48ae06ff1d676eea59d5bc6cf360d9588
-
SHA512
41171dbd16d23a8527b1dbc25c20dd3ff7803208acba6878041909fd218fae2f20c7d7fef2e3b387d808df5be2717ab9bcd9757e6804e00650d125cfb5ba8f10
-
SSDEEP
3072:0nXLFcmIt+7rTsrOGenIBaJIhdoVcvmt8F4WT70/Lxss2K:07um/+bBaSjouGUiLr2K
Malware Config
Signatures
Files
-
543707503d3a052fa3ea4fce22951de48ae06ff1d676eea59d5bc6cf360d9588.exe windows x86
fc2e8e879b946d173c3a7f8a1abce6c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetPropA
BroadcastSystemMessage
GetSysColor
CallNextHookEx
CalcMenuBar
IsWindowUnicode
IsWindowVisible
LockWindowUpdate
EndTask
CascadeWindows
OpenClipboard
OemToCharW
GetTabbedTextExtentA
GetTabbedTextExtentW
OffsetRect
OpenInputDesktop
MonitorFromRect
TranslateMessage
MoveWindow
HideCaret
SetRectEmpty
IntersectRect
GetCaretPos
GetWindowWord
FlashWindow
ReleaseDC
GetAncestor
InsertMenuW
GetWindowRgn
IsWindowVisible
ShowCursor
GetWindowDC
GetWindowInfo
GetUpdateRect
GetUpdateRgn
onex
OneXAddEapAttributes
opengl32
glColor3b
glColor3bv
glColor3d
glColor3dv
glColor3f
glColor3fv
glColor3i
glColor3iv
glColor3s
kernel32
GetLastError
CreateFileA
GetWindowsDirectoryA
GetTickCount
ExitProcess
EnterCriticalSection
InitializeCriticalSection
VirtualFree
IsBadCodePtr
LocalFree
LocalAlloc
GetTickCount
_lread
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
IsValidCodePage
IsBadWritePtr
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
SearchPathA
ExitProcess
ExitThread
CreateThread
GetTempPathW
OpenThread
SetConsoleFont
SetCalendarInfoW
Process32Next
LeaveCriticalSection
SetConsolePalette
SetConsoleScreenBufferSize
msi
MsiCreateRecord
MsiCreateRecord
MsiCreateRecord
MsiCreateRecord
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ