Static task
static1
Behavioral task
behavioral1
Sample
a5991818d94057096bfcb0ea3cf968c5f67e6ee849a42b4e66ad2d0b9e21c6fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5991818d94057096bfcb0ea3cf968c5f67e6ee849a42b4e66ad2d0b9e21c6fc.exe
Resource
win10v2004-20220812-en
General
-
Target
a5991818d94057096bfcb0ea3cf968c5f67e6ee849a42b4e66ad2d0b9e21c6fc
-
Size
112KB
-
MD5
6f4941483c345bbada4ecd377e4d2ba4
-
SHA1
c224f1173df382c9973c7ba4441ddcd11de92dd2
-
SHA256
a5991818d94057096bfcb0ea3cf968c5f67e6ee849a42b4e66ad2d0b9e21c6fc
-
SHA512
861e4fd6af9fadba2966320da79ceff47125684c7ce34996ae594a61a3172a237611e6457480cdeb22f37aacc3be8b179488321b00b56ea0f6b7065439b3dfef
-
SSDEEP
1536:ejZDNZct1NwYR6maCN0GN1xLo3la+3BJWhN7dhHylhTohQh+ua5GnTYgIi:SFcKYnaabT6W39u8aTNI
Malware Config
Signatures
Files
-
a5991818d94057096bfcb0ea3cf968c5f67e6ee849a42b4e66ad2d0b9e21c6fc.exe windows x86
2d60867a727d87786891722c916b4c54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
GetDlgItem
CopyImage
CreateIcon
GetFocus
CopyIcon
GetDC
DrawIconEx
DrawIcon
GetMenu
GetWindowTextLengthA
DrawTextW
AppendMenuA
CloseWindow
GetDC
AppendMenuA
DialogBoxParamW
DrawIcon
CalcMenuBar
CopyImage
GetDlgItem
DialogBoxParamA
CopyIcon
InsertMenuA
DrawTextW
BlockInput
AppendMenuW
AlignRects
DrawIconEx
CopyRect
IsWindow
DialogBoxParamW
CreateIcon
GetWindowTextLengthA
DrawTextA
DrawIcon
GetFocus
DrawIconEx
DrawTextW
IsWindow
CopyImage
AppendMenuW
LoadMenuA
AppendMenuA
IsMenu
CalcMenuBar
IsMenu
GetWindowTextLengthA
AlignRects
DrawTextW
LoadMenuA
BlockInput
AppendMenuA
LoadCursorA
GetWindowTextA
GetCursor
AppendMenuW
GetFocus
DrawTextA
advapi32
RegOpenKeyA
RegQueryInfoKeyW
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueW
RegEnumValueA
RegReplaceKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyW
RegCreateKeyExW
RegEnumValueW
RegQueryValueA
RegQueryValueExW
RegEnumKeyExA
RegEnumValueW
RegEnumValueA
RegQueryInfoKeyA
RegDeleteKeyW
RegCreateKeyW
RegDeleteValueA
RegReplaceKeyA
RegDeleteValueW
RegEnumKeyA
RegDeleteKeyA
RegQueryInfoKeyW
RegCreateKeyExA
RegLoadKeyA
comctl32
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_LoadImageW
ImageList_Destroy
ImageList_GetImageRect
ImageList_Draw
ImageList_GetIconSize
ImageList_AddIcon
ImageList_Replace
ImageList_GetIcon
kernel32
DeleteAtom
GetLastError
DeleteFileA
ReadConsoleA
GetFileSize
CreateDirectoryA
OpenFileMappingA
GetCPInfo
ExitThread
FindFirstFileA
ReadConsoleW
DeleteFileW
CreateThread
FindAtomA
WriteFile
OpenFile
CopyFileA
Sections
.TeXt Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ITeXt Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.EdAta Size: 8KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TLs Size: 4KB - Virtual size: 197B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.IDATa Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ