Static task
static1
Behavioral task
behavioral1
Sample
d5532931f968ef9736697429c3dad856d2a36a4981f450e3b22fa54f723b1f93.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5532931f968ef9736697429c3dad856d2a36a4981f450e3b22fa54f723b1f93.exe
Resource
win10v2004-20220901-en
General
-
Target
d5532931f968ef9736697429c3dad856d2a36a4981f450e3b22fa54f723b1f93
-
Size
216KB
-
MD5
6d195569d77e73c63ddbb9edb4bec750
-
SHA1
8c05d49928bb6f004d26e082decaa05b30db1589
-
SHA256
d5532931f968ef9736697429c3dad856d2a36a4981f450e3b22fa54f723b1f93
-
SHA512
84b0dd208a0afc9b5839a936a9517464e2ce85d7a56c9c5a86907aff4591349b4f6492cacfb366f6a0efa8aed6c4a3b593555c1d1995d4315696380631e3d1ed
-
SSDEEP
6144:P7Fv+1AnqWa3mK9pH5nBHV4+GI133udyp15:TF+ua5pl9V4+F1Hu4pv
Malware Config
Signatures
Files
-
d5532931f968ef9736697429c3dad856d2a36a4981f450e3b22fa54f723b1f93.exe windows x86
dda70cdff98b8ca1b8cdf3dc3c76569b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msnetobj
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
kernel32
GetThreadPriority
ReleaseSemaphore
MulDiv
GetCurrentThread
CreateThread
lstrcpyW
IsBadCodePtr
QueryPerformanceCounter
GetFileSize
SetThreadPriority
GetProfileIntA
CloseHandle
WaitForMultipleObjects
GetFileAttributesW
GetDiskFreeSpaceW
FreeLibrary
GetQueuedCompletionStatus
lstrcmpiW
lstrcpyA
CreateEventW
LeaveCriticalSection
lstrcmpW
WaitForSingleObject
SetUnhandledExceptionFilter
GetCurrentProcess
GetEnvironmentStringsW
DeleteFileW
InterlockedIncrement
GetFullPathNameW
ResetEvent
InterlockedExchange
HeapFree
GlobalAlloc
HeapAlloc
GetSystemInfo
GetTimeZoneInformation
CreateFileW
GlobalLock
SetFilePointer
GetCurrentProcessId
GetTickCount
GetModuleFileNameA
GlobalMemoryStatus
lstrcpynW
IsBadWritePtr
GlobalHandle
GetSystemTimeAsFileTime
LoadLibraryW
GetLastError
GetModuleHandleA
lstrlenA
EnterCriticalSection
CreateSemaphoreW
MultiByteToWideChar
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetProcessHeap
IsBadReadPtr
lstrlenW
InitializeCriticalSection
WriteFile
InterlockedDecrement
DeleteCriticalSection
SetEvent
GetVersionExW
GetPrivateProfileStringW
ReadFile
SetEndOfFile
VirtualFree
oleaut32
VarBstrFromDisp
VarBstrFromUI2
VarBstrFromI8
VarBstrFromDate
VarBstrFromR4
VarBstrFromUI8
VarBstrFromI2
VarBstrFromDec
VarBstrFromI4
VarBstrFromUI1
VarBstrFromUI4
VarBstrFromCy
VarBstrFromI1
VarBstrFromR8
user32
CreateDialogParamW
ReleaseDC
SendMessageW
PeekMessageW
InvalidateRect
SetWindowLongW
DestroyWindow
GetAsyncKeyState
SetDlgItemInt
GetDesktopWindow
DefWindowProcW
GetWindowLongW
GetDC
CheckRadioButton
IsRectEmpty
DispatchMessageW
LoadStringW
GetDlgItemInt
MoveWindow
TranslateMessage
GetWindowRect
SetCursor
GetDlgItem
EnableWindow
ClientToScreen
GetClientRect
IsWindowVisible
CheckDlgButton
ShowWindow
IsWindow
SetDlgItemTextW
LoadCursorW
msoert2
AppendTempFileList
msls31
LsCompressSubline
LssbGetPlsrunsFromSubline
LssbGetDurTrailWithPensInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetVisibleDcpInSubline
nddeapi
NDdeGetErrorStringA
NDdeGetTrustedShareW
NDdeIsValidAppTopicListW
NDdeIsValidAppTopicListA
NDdeGetShareSecurityA
NDdeGetShareSecurityW
NDdeGetTrustedShareA
cewmdm
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
msoeacct
DllGetClassObject
ValidEmailAddress
DllCanUnloadNow
GetDllMajorVersion
HrCreateAccountManager
msltus40
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ