Static task
static1
Behavioral task
behavioral1
Sample
5aead97eb7375a52f361ab39e4da14bb9fed92293da7f94109053735a8ddf1c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5aead97eb7375a52f361ab39e4da14bb9fed92293da7f94109053735a8ddf1c3.exe
Resource
win10v2004-20220812-en
General
-
Target
5aead97eb7375a52f361ab39e4da14bb9fed92293da7f94109053735a8ddf1c3
-
Size
464KB
-
MD5
09e3f942d84b03ee5daa357f7687a36a
-
SHA1
13f9754013e3049d6da2b097dbbed4be0adbe10f
-
SHA256
5aead97eb7375a52f361ab39e4da14bb9fed92293da7f94109053735a8ddf1c3
-
SHA512
1e3f666a25739736d1ed09ad6bfed9a905f4f99df3b57e812b41a595f452c9d6d4df8ae671ae8063d1b029a81bd0c46e84a28408003686d9f20404a970902333
-
SSDEEP
12288:DXIc6yMUsd62+1gAFZrbqZCrzCpSQAxB4IozpOG:DXZFMU4+1gQZnnC4txuhp7
Malware Config
Signatures
Files
-
5aead97eb7375a52f361ab39e4da14bb9fed92293da7f94109053735a8ddf1c3.exe windows x86
9f88f26577cd9fc542a1f444885a2cce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
StretchBlt
Arc
ExtCreateRegion
BitBlt
SetAbortProc
CreateBrushIndirect
GetCharABCWidthsA
CreatePatternBrush
FillRgn
Polyline
SetPolyFillMode
ExcludeClipRect
SetRectRgn
ExtCreatePen
ExtFloodFill
GetBkMode
SetWindowExtEx
LineTo
GetObjectA
CreatePen
SetMapMode
IntersectClipRect
SetROP2
CreateCompatibleBitmap
GetGlyphOutlineA
GetMapMode
ExtTextOutA
DeleteDC
StrokePath
CreateEllipticRgn
GetTextMetricsW
SelectClipRgn
CreateFontIndirectA
GetDeviceCaps
SetTextColor
urlmon
URLDownloadToFileW
user32
RemovePropA
ShowWindow
GetSystemMenu
PostQuitMessage
GetDlgItem
DeleteMenu
DrawMenuBar
LoadCursorA
DefWindowProcA
LoadIconA
CreateWindowExA
GetWindowLongA
TranslateAcceleratorA
IsWindowEnabled
ReleaseCapture
InvalidateRect
FillRect
ReleaseDC
SetTimer
GetMenu
MoveWindow
BeginPaint
GetIconInfo
DestroyWindow
ClientToScreen
RegisterWindowMessageA
SetWindowRgn
GetCapture
CloseClipboard
GetSubMenu
GetWindowRect
AdjustWindowRectEx
ModifyMenuA
EndPaint
AppendMenuA
SetCursorPos
RegisterClassA
SetCapture
DialogBoxParamA
OpenClipboard
CopyRect
GetParent
MessageBeep
EndDialog
GetWindowPlacement
MessageBoxA
ExitWindowsEx
GetDlgItemInt
RegisterClassExA
IsWindow
SetRectEmpty
LoadStringA
GetSysColor
PeekMessageA
SendDlgItemMessageA
UnhookWindowsHookEx
ole32
OleDuplicateData
CoInitialize
CoTaskMemFree
StringFromCLSID
OleFlushClipboard
CoRegisterMessageFilter
OleIsCurrentClipboard
CoTaskMemAlloc
CoCreateInstance
mpr
WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA
comctl32
_TrackMouseEvent
ImageList_GetIcon
InitCommonControlsEx
ImageList_Create
ImageList_DrawEx
ImageList_GetIconSize
kernel32
LocalFree
SetEnvironmentVariableA
VirtualFree
GetOEMCP
GlobalLock
LCMapStringA
InterlockedExchange
GetCurrentProcessId
GetProcAddress
MapViewOfFile
HeapDestroy
RtlUnwind
GetEnvironmentStrings
SetUnhandledExceptionFilter
InitializeCriticalSection
WideCharToMultiByte
GetStartupInfoA
LeaveCriticalSection
FlushFileBuffers
SetFilePointer
LoadLibraryA
WriteFile
GetEnvironmentStringsW
SetLastError
DeleteCriticalSection
GetStringTypeA
GetLocalTime
HeapReAlloc
CreateMutexA
CreateThread
CompareStringW
QueryPerformanceCounter
EnterCriticalSection
FreeEnvironmentStringsW
UnhandledExceptionFilter
VirtualQuery
IsBadCodePtr
GetSystemTime
ExitProcess
FreeResource
InterlockedIncrement
GetCurrentThreadId
GetLastError
HeapSize
GetModuleHandleA
GetCommandLineA
TerminateProcess
HeapCreate
GetFileAttributesA
GetFileType
GetCPInfo
GetStringTypeW
GetCurrentProcess
LCMapStringW
GetTickCount
InterlockedDecrement
FreeLibrary
ReadFile
GetACP
TlsGetValue
CloseHandle
MultiByteToWideChar
TlsAlloc
RaiseException
FreeEnvironmentStringsA
GetStdHandle
GetModuleFileNameA
SetStdHandle
SetHandleCount
HeapFree
TlsSetValue
GetVersion
VirtualAlloc
GetTimeZoneInformation
GetSystemTimeAsFileTime
HeapAlloc
CompareStringA
shell32
SHFileOperationW
SHChangeNotify
ord155
DragQueryFileW
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ