Static task
static1
Behavioral task
behavioral1
Sample
5a4a20a1e9d7696d1646780cc2afe16555273526c870cbfe526e4e92aa165443.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a4a20a1e9d7696d1646780cc2afe16555273526c870cbfe526e4e92aa165443.exe
Resource
win10v2004-20220812-en
General
-
Target
5a4a20a1e9d7696d1646780cc2afe16555273526c870cbfe526e4e92aa165443
-
Size
448KB
-
MD5
710114b0c610dc6bdf23cbcceec9caf4
-
SHA1
95ec7f76c4a0a6245db1f78191e18d68f96284c0
-
SHA256
5a4a20a1e9d7696d1646780cc2afe16555273526c870cbfe526e4e92aa165443
-
SHA512
00cf78713abe5d0517911f90fc5c25ac6a2149416dac3f2221b2429554c55dd37137c6307736d1a1d1b6e32afe155e4f51fff03527d1f8d1030021384cb52246
-
SSDEEP
6144:Qd07QS8IA2ThgtNqLoIU9cedWxiAcFKMC0JQ6BURqDGSmA/mldw1uz:Qd07enGgtNqq9cedIKGiGS1+ldw
Malware Config
Signatures
Files
-
5a4a20a1e9d7696d1646780cc2afe16555273526c870cbfe526e4e92aa165443.exe windows x86
e8b55975ed114d003cb23e560629c898
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
CopyFileW
GetSystemDirectoryW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
lstrcmpW
lstrcmpiW
CreateMutexW
InterlockedExchange
DeleteCriticalSection
GetACP
FindClose
FindNextFileW
FindFirstFileW
GetModuleHandleW
InitializeCriticalSection
MultiByteToWideChar
LoadLibraryExW
GetEnvironmentVariableW
CreateEventW
GetLocalTime
FileTimeToSystemTime
CreateFileMappingW
lstrcatW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
FlushInstructionCache
SetLastError
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
WriteFile
HeapSize
HeapReAlloc
HeapCreate
ExitProcess
IsValidCodePage
GetOEMCP
GetCPInfo
GetModuleHandleA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
RtlUnwind
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExW
RaiseException
GetDriveTypeW
GetPrivateProfileIntW
GetTickCount
GetCommandLineW
GetCurrentThreadId
GetPrivateProfileStringW
SetEnvironmentVariableW
SetEvent
ResetEvent
CloseHandle
WaitForSingleObject
GetModuleFileNameW
lstrcpyW
LoadLibraryW
GetProcAddress
Sleep
GetCurrentThread
GetLastError
GetCurrentProcess
LocalAlloc
LocalFree
InterlockedDecrement
lstrlenW
lstrlenA
OutputDebugStringW
DebugBreak
LoadResource
LockResource
SizeofResource
InterlockedCompareExchange
FindResourceW
CreateDirectoryW
WritePrivateProfileStringW
ExpandEnvironmentStringsW
GetStringTypeW
user32
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetParent
EndDialog
GetWindowLongW
GetWindowRect
MonitorFromWindow
LoadIconW
CallWindowProcW
GetDlgItemTextW
GetWindowTextLengthW
GetWindowTextW
SetDlgItemTextW
SetWindowTextW
wsprintfW
DefWindowProcW
FindWindowW
CharUpperW
IsWindow
IsDialogMessageW
ShowWindow
PostMessageW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
MonitorFromPoint
CreateMenu
GetMenuContextHelpId
SetMenuContextHelpId
InsertMenuItemW
GetMenuItemInfoW
ModifyMenuW
GetSubMenu
GetMenuItemCount
EnableMenuItem
AppendMenuW
TrackPopupMenu
DestroyMenu
CreatePopupMenu
DestroyWindow
CreateDialogParamW
DialogBoxParamW
BringWindowToTop
GetCursorPos
PostQuitMessage
RegisterWindowMessageW
GetActiveWindow
LoadStringW
CharNextW
SetWindowLongW
MessageBoxW
GetDlgItem
IsDlgButtonChecked
CheckDlgButton
SetFocus
EnableWindow
IsWindowEnabled
SendMessageW
GetSystemMetrics
LoadImageW
SystemParametersInfoW
SetForegroundWindow
GetWindow
UnregisterClassA
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RevertToSelf
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegQueryValueW
RegSetValueW
RegOpenKeyW
RegCreateKeyW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
ImpersonateSelf
OpenThreadToken
OpenProcessToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
FreeSid
shell32
ShellExecuteW
Shell_NotifyIconW
CommandLineToArgvW
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHChangeNotify
ShellExecuteExW
ole32
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
oleaut32
VarBstrCat
SysAllocStringByteLen
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString
VarUI4FromStr
SysStringByteLen
shlwapi
PathFileExistsW
PathAppendW
PathFindFileNameW
PathIsDirectoryW
StrStrIW
StrCmpNIW
comctl32
DestroyPropertySheetPage
InitCommonControlsEx
CreatePropertySheetPageW
PropertySheetW
imagehlp
MapFileAndCheckSumW
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE