Static task
static1
Behavioral task
behavioral1
Sample
56c5d3d9f8602526b7b993344b750074898630fcb657d14e410c2e629f6e956c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56c5d3d9f8602526b7b993344b750074898630fcb657d14e410c2e629f6e956c.exe
Resource
win10v2004-20220812-en
General
-
Target
56c5d3d9f8602526b7b993344b750074898630fcb657d14e410c2e629f6e956c
-
Size
340KB
-
MD5
3e10ae6b78b46a22e8524d0c2e712590
-
SHA1
4e9bb039f74ab3acb8ce6405aa077c89f6b1282d
-
SHA256
56c5d3d9f8602526b7b993344b750074898630fcb657d14e410c2e629f6e956c
-
SHA512
109c506b89896063e74dfe26484fecad85686a64edee79b6ee68a4d6c5187ac86c70d96991de1c4be5c7ed8015e653c4cbf6e73595e26445b1f76749eee8df5d
-
SSDEEP
3072:yXbaCbeJAtOvQNoVMbckqFGro0sqss58ci5/DSDADeak7dJHB/AdGuw:0aCbBCFMHqcro0KDSsQLH5Adxw
Malware Config
Signatures
Files
-
56c5d3d9f8602526b7b993344b750074898630fcb657d14e410c2e629f6e956c.exe windows x86
246f7cab86401d6d19b95b3864ade0a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ddraw
DirectDrawEnumerateExA
DirectDrawCreateEx
kernel32
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
TerminateProcess
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
LocalFree
Sleep
GetModuleHandleA
lstrcpynA
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetProcessVersion
LoadLibraryA
FreeLibrary
GetTickCount
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetProcAddress
GetCurrentThreadId
CloseHandle
GetVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GetEnvironmentVariableA
SetLastError
user32
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
SetWindowTextA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DestroyWindow
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyState
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
EnableWindow
LoadStringA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
SetTimer
PostMessageA
SetCursor
GetSubMenu
PostQuitMessage
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
LoadImageA
MessageBoxA
GetMenuCheckMarkDimensions
ModifyMenuA
gdi32
DeleteDC
GetObjectA
SelectObject
CreateCompatibleDC
DeleteObject
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetDeviceCaps
SaveDC
RestoreDC
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
StretchBlt
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
comctl32
ord17
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 240KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ