Static task
static1
Behavioral task
behavioral1
Sample
5508634a24a5361e712abdc23b70858c73c2c963642cf2f73ef25ad919580eb6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5508634a24a5361e712abdc23b70858c73c2c963642cf2f73ef25ad919580eb6.exe
Resource
win10v2004-20220812-en
General
-
Target
5508634a24a5361e712abdc23b70858c73c2c963642cf2f73ef25ad919580eb6
-
Size
801KB
-
MD5
72d5367e5a5c1eeee5ae3383c6b277d0
-
SHA1
1d45634ce4d9a45e7eddb8b28dbb4774dad61931
-
SHA256
5508634a24a5361e712abdc23b70858c73c2c963642cf2f73ef25ad919580eb6
-
SHA512
0d6d39c9cbc3a8a4c802dd9c92976e6f8ebd8632600c1f4903c29d46a4f44c00f4034205e199426a604ae1a3e93be6f9113108b35e023c961719aa882b4840ec
-
SSDEEP
12288:fXGWTtmAtNhaMN6S8++NowRIq7NGSMWoJI3uEU8PyvN7L54gGUldKftIGJSYp5PZ:v/xRNhn9Z+2gNG5WAFKY7L5J7US2J+
Malware Config
Signatures
Files
-
5508634a24a5361e712abdc23b70858c73c2c963642cf2f73ef25ad919580eb6.exe windows x86
a1ed0a0e7b321a2b20cd7f4418140922
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
InitializeCriticalSection
DeleteCriticalSection
SetUnhandledExceptionFilter
IsWow64Process
GetCurrentProcess
GetVersionExW
LoadLibraryW
GetSystemDirectoryW
SetProcessWorkingSetSize
HeapCompact
GetProcessHeap
CloseHandle
WaitForSingleObject
CreateProcessW
FreeLibrary
GetProcAddress
GetLastError
CreateFileMappingW
GlobalLock
GlobalUnlock
FindClose
FindNextFileW
MoveFileW
FindFirstFileW
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationW
CreateDirectoryW
GlobalFree
GlobalAlloc
OpenProcess
GetModuleHandleW
CreateEventW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetModuleFileNameW
Sleep
GetCommandLineW
GetCurrentThreadId
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateMutexW
OpenFileMappingW
HeapAlloc
HeapFree
CompareStringW
GetStringTypeW
GetLocaleInfoW
LocalAlloc
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualProtect
LoadLibraryA
user32
CreatePopupMenu
AppendMenuW
EnableMenuItem
SetMenuDefaultItem
CheckMenuItem
SetRect
GetCursorPos
TrackPopupMenu
DestroyMenu
SendMessageW
RedrawWindow
EnumDisplayMonitors
FillRect
SetFocus
SetCapture
SetRectEmpty
LoadCursorW
SetCursor
DefWindowProcW
ShowWindow
WindowFromPoint
IsChild
RegisterWindowMessageW
LoadIconW
RegisterClassExW
CreateWindowExW
SetForegroundWindow
GetDC
OpenClipboard
EmptyClipboard
RegisterClipboardFormatW
IsRectEmpty
CloseClipboard
ReleaseDC
DestroyWindow
PostQuitMessage
LoadImageW
RegisterHotKey
GetMessageW
UnregisterHotKey
DispatchMessageW
PeekMessageW
TranslateMessage
MsgWaitForMultipleObjects
InvalidateRect
GetSysColorBrush
FrameRect
InflateRect
BeginPaint
EndPaint
UnionRect
GetWindowThreadProcessId
AllowSetForegroundWindow
SendMessageTimeoutW
LoadStringW
MessageBoxW
PostMessageW
SystemParametersInfoW
SetClipboardData
msvcr90
__CxxFrameHandler3
_controlfp_s
_invoke_watson
_crt_debugger_hook
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
vswprintf_s
wcscpy_s
??_U@YAPAXI@Z
free
_CxxThrowException
memcpy
_snwprintf_s
wcsstr
swprintf_s
wcscat_s
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 588KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE