Microsoft_WDF_UMDF_Version
Static task
static1
Behavioral task
behavioral1
Sample
52cecdbbcb6a217b813703613f3aa65b6f874bb6492bc6844075b8c9ffae0a04.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52cecdbbcb6a217b813703613f3aa65b6f874bb6492bc6844075b8c9ffae0a04.exe
Resource
win10v2004-20220812-en
General
-
Target
52cecdbbcb6a217b813703613f3aa65b6f874bb6492bc6844075b8c9ffae0a04
-
Size
154KB
-
MD5
684a5926c206af9eaedd8be1e0057988
-
SHA1
9090bf39f14903e0039079c9a024abea7d9ae94a
-
SHA256
52cecdbbcb6a217b813703613f3aa65b6f874bb6492bc6844075b8c9ffae0a04
-
SHA512
10dce00cc55304e280888c0a1e8fa936b675c09d5ff71c7c3165fd1802ec1096e5a28e9dabc5fb81cbfa4cf498a8da665c44d4ee254efaa0505c75d0218af1a1
-
SSDEEP
1536:4UyM/WN6YmjS7WW0sXQPTiIf+sreomgPHA5kG9mQ7N6wMkNaAYG5n8scOFzyRTXh:4ZdXXQPTB+srxPxQZDFcZIZcXjpRT
Malware Config
Signatures
Files
-
52cecdbbcb6a217b813703613f3aa65b6f874bb6492bc6844075b8c9ffae0a04.exe windows x86
769cfe709f5ac68b8a6b4f809213e73f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
RegCloseKey
RegQueryValueExW
RegCreateKeyW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
kernel32
Sleep
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
CreateThread
CloseHandle
FindResourceW
LoadResource
LockResource
FreeResource
GetLastError
LocalFree
GetSystemTimeAsFileTime
gdi32
DeleteObject
SetTextColor
SetBkColor
CreateSolidBrush
CreateFontIndirectW
user32
KillTimer
SendMessageW
PostQuitMessage
UnregisterDeviceNotification
DestroyWindow
FindWindowW
GetWindowTextW
PostMessageW
RegisterDeviceNotificationW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
SetTimer
RegisterClassExW
LoadStringW
GetSysColorBrush
GetSysColor
GetDlgCtrlID
SetActiveWindow
SetDlgItemTextW
EnableWindow
CheckDlgButton
SendDlgItemMessageW
LoadIconW
SetWindowTextW
GetDlgItem
SetWindowLongW
SetFocus
GetParent
IsDlgButtonChecked
GetWindowTextLengthW
FindWindowExW
SetForegroundWindow
DialogBoxParamW
GetWindowLongW
CreateWindowExW
EndDialog
msvcrt
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__commode
__setusermatherr
memset
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
__CxxFrameHandler3
_vsnwprintf
??2@YAPAXI@Z
_wcsicmp
??3@YAXPAX@Z
wcstoul
__p__fmode
_amsg_exit
ole32
CoInitializeEx
CoCreateInstance
CoTaskMemFree
oleaut32
SysFreeString
SysAllocString
setupapi
SetupDiGetClassDevsExW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
shell32
ShellExecuteExW
CommandLineToArgvW
uxtheme
GetThemeFont
GetThemeColor
OpenThemeData
CloseThemeData
comctl32
ord344
PropertySheetW
CreatePropertySheetPageW
ord345
crypt32
CryptUnprotectMemory
CryptProtectMemory
wtsapi32
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
ntdll
WinSqmAddToStream
powrprof
CallNtPowerInformation
Exports
Exports
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE