Static task
static1
Behavioral task
behavioral1
Sample
b5d33533820be5d568406b31083e33e74d66423aa1ae727f294b81d230daf474.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5d33533820be5d568406b31083e33e74d66423aa1ae727f294b81d230daf474.exe
Resource
win10v2004-20220812-en
General
-
Target
b5d33533820be5d568406b31083e33e74d66423aa1ae727f294b81d230daf474
-
Size
614KB
-
MD5
091081bcc9e0b863589f1456a846ed10
-
SHA1
a1d7acd031c675056010dbc8c0e06a87a9d7fe08
-
SHA256
b5d33533820be5d568406b31083e33e74d66423aa1ae727f294b81d230daf474
-
SHA512
5cb4e5b37e0994c602ce6de6311ad1671fe90b17d9a15d63239332c1dc8dbcc7c55912a9bde87ccc5f4f53f601c5341683c6c927096412091bf5035aa5e7af1e
-
SSDEEP
12288:UypSWJYPwjMfmeONj+THSETUuHEMmSsPdD:U/hjfmeFTHVTUufmSoh
Malware Config
Signatures
Files
-
b5d33533820be5d568406b31083e33e74d66423aa1ae727f294b81d230daf474.exe windows x86
73474366c4dce8754d6db65877fbbaff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetACP
GetSystemTimeAsFileTime
HeapSize
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RaiseException
ExitProcess
Sleep
RtlUnwind
HeapReAlloc
HeapFree
QueryPerformanceCounter
VirtualFree
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
GetOEMCP
GetCPInfo
GetModuleHandleW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
FileTimeToSystemTime
GetThreadLocale
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
GlobalUnlock
CloseHandle
FreeResource
GlobalFree
WritePrivateProfileStringA
GlobalAddAtomA
GetCurrentProcessId
GetLastError
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
LoadLibraryA
FindResourceA
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
lstrlenA
LockResource
SizeofResource
WideCharToMultiByte
LoadResource
IsDebuggerPresent
user32
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
EnableWindow
GetSystemMetrics
SendMessageA
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClassNameA
GetClassLongA
GetCapture
IsChild
WinHelpA
UpdateWindow
SendDlgItemMessageA
RegisterWindowMessageA
GetClientRect
LoadIconA
IsIconic
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
GetParent
GetFocus
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
PostQuitMessage
PostMessageA
SetCursor
MessageBoxA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetWindowThreadProcessId
SetWindowPos
MapDialogRect
SetWindowContextHelpId
GetWindow
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
IsDialogMessageA
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
GetSysColorBrush
LoadCursorA
SetCapture
ReleaseCapture
CharUpperA
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
DestroyMenu
RegisterClipboardFormatA
PostThreadMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
UnhookWindowsHookEx
GetSysColor
EndPaint
BeginPaint
GetWindowDC
SetWindowsHookExA
ReleaseDC
GetDC
ClientToScreen
SetWindowTextA
MoveWindow
ShowWindow
GrayStringA
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetDesktopWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
TabbedTextOutA
DrawTextA
DrawTextExA
gdi32
DeleteObject
GetObjectA
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetDeviceCaps
SaveDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
RestoreDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
shlwapi
PathFindFileNameA
PathFindExtensionA
PathIsUNCA
PathStripToRootA
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
SysStringLen
ws2_32
WSASetLastError
WSAStartup
WSACleanup
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ