Static task
static1
Behavioral task
behavioral1
Sample
540ab3bf0e0e3702be46c6a7b9863e55214a7f138119a34c04e2435fa58c1923.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
540ab3bf0e0e3702be46c6a7b9863e55214a7f138119a34c04e2435fa58c1923.exe
Resource
win10v2004-20220812-en
General
-
Target
540ab3bf0e0e3702be46c6a7b9863e55214a7f138119a34c04e2435fa58c1923
-
Size
185KB
-
MD5
438b894e2532b3e99b0bb1f45d2b7bc0
-
SHA1
84077e1b84e8fdcb40df6ce4c5a9828533bff25e
-
SHA256
540ab3bf0e0e3702be46c6a7b9863e55214a7f138119a34c04e2435fa58c1923
-
SHA512
14485ad59f87b09c5d7f902bbb78a896aa61849cd735232bb9b1858df380be191147577bf4223d9f2c6e03e7d7192ad89880d373c86e0efce3701df20327dd43
-
SSDEEP
3072:hNN1qo/cSV1mOzNTizcliXjrCOk2PgqfcAtYEjOaxI9/cnOe:hNNEoUClzG02PPgqfw5axI/e
Malware Config
Signatures
Files
-
540ab3bf0e0e3702be46c6a7b9863e55214a7f138119a34c04e2435fa58c1923.exe windows x86
28957af44816b9cb811034464c45a151
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushInstructionCache
GetEnvironmentVariableA
CreateJobObjectW
FindFirstFileExA
GetTempPathA
_lread
WriteProfileSectionA
EscapeCommFunction
DisconnectNamedPipe
GetLongPathNameA
RequestWakeupLatency
DeleteVolumeMountPointW
BackupWrite
WriteFileGather
EnumResourceNamesA
MapViewOfFileEx
GlobalMemoryStatus
EnumSystemLanguageGroupsA
InterlockedCompareExchange
ResumeThread
CreateWaitableTimerW
SetMailslotInfo
RtlZeroMemory
LCMapStringW
TransactNamedPipe
LocalCompact
GlobalWire
CreateMutexW
GlobalLock
GetStringTypeW
user32
GetWindowPlacement
GetListBoxInfo
SetActiveWindow
SetCursor
SubtractRect
GetGuiResources
UnregisterHotKey
SetScrollPos
GetSystemMetrics
CloseClipboard
DdeGetData
DestroyCursor
LoadStringW
DefWindowProcW
IsCharAlphaNumericW
InvalidateRgn
PostQuitMessage
IsDlgButtonChecked
MoveWindow
GetWindow
EnumThreadWindows
SetMessageQueue
IsChild
GetTopWindow
GetDlgItemInt
DialogBoxParamA
SendDlgItemMessageA
CreateCursor
GetClassLongW
IMPQueryIMEW
MsgWaitForMultipleObjectsEx
CallWindowProcW
CharToOemW
MonitorFromRect
ReplyMessage
IsCharLowerA
DdeQueryNextServer
GetWindowTextW
SetMenuContextHelpId
SetDlgItemTextW
DrawTextExW
DrawEdge
EnumDisplayDevicesA
GetWindowModuleFileNameA
TranslateAcceleratorA
ChildWindowFromPoint
TrackMouseEvent
GetAltTabInfoA
GetCaretPos
UnloadKeyboardLayout
SetMenuItemInfoA
GetInputDesktop
CopyImage
DdeEnableCallback
GetDoubleClickTime
CharPrevW
UnpackDDElParam
EnableWindow
HideCaret
RedrawWindow
NotifyWinEvent
DdeNameService
SetMessageExtraInfo
UpdateLayeredWindow
LoadKeyboardLayoutW
GetClassLongA
WINNLSGetIMEHotkey
GetClassWord
SetWindowPlacement
WindowFromPoint
RegisterWindowMessageA
GetMenuItemRect
MapDialogRect
GetCursorInfo
GetMessageTime
OemToCharW
GetWindowLongW
DispatchMessageW
WaitMessage
ChangeClipboardChain
DdePostAdvise
DestroyAcceleratorTable
ValidateRgn
SetCaretBlinkTime
CascadeWindows
EnumPropsA
DdeInitializeA
ToUnicodeEx
ToUnicode
SetThreadDesktop
GetKeyNameTextW
IsWindowUnicode
RegisterClipboardFormatA
GetScrollRange
SetScrollInfo
CharLowerBuffW
MonitorFromWindow
DrawStateW
OpenInputDesktop
IsCharLowerW
GetWindowWord
GetNextDlgTabItem
MapVirtualKeyExA
CheckRadioButton
TabbedTextOutA
ShowCaret
LoadKeyboardLayoutA
shell32
SHGetDiskFreeSpaceA
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE