Static task
static1
Behavioral task
behavioral1
Sample
5a152716d4b227798d2e6f78941e6805486da958fbf1d7e9ff0bfecda80278f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a152716d4b227798d2e6f78941e6805486da958fbf1d7e9ff0bfecda80278f0.exe
Resource
win10v2004-20220812-en
General
-
Target
5a152716d4b227798d2e6f78941e6805486da958fbf1d7e9ff0bfecda80278f0
-
Size
187KB
-
MD5
6137f06520401d07cb74093e0cabe321
-
SHA1
6973d0638a9dc1d2e5bbb7b569adc949ed7330eb
-
SHA256
5a152716d4b227798d2e6f78941e6805486da958fbf1d7e9ff0bfecda80278f0
-
SHA512
4d38a2e6f45cad0e86f16c0a6137bea1cb7b82835b327ed87d41bbd6fda784239d2950e1ba8c3a2183d102f9a7d13fabc3364cd82585ba9f3c94febd82c707ac
-
SSDEEP
3072:8xNq0VZ3lfElh7TsQ31BZQ8Ccen75sWhjQyFtnHOY/sj5ffwu55xmMQVHswELmad:Uq0VZ3lfElh7TW8/e75xQy7HOwChIxMZ
Malware Config
Signatures
Files
-
5a152716d4b227798d2e6f78941e6805486da958fbf1d7e9ff0bfecda80278f0.exe windows x86
dc654f9c20ed38b3734b217db5700cdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowTextA
ShowOwnedPopups
GetForegroundWindow
GetWindow
FindWindowExA
GetWindowPlacement
AdjustWindowRect
EnumChildWindows
EndDialog
FindWindowA
SetDlgItemInt
TileWindows
GetDlgCtrlID
CreateWindowExA
LoadCursorA
GetClipboardData
LoadIconA
ChildWindowFromPointEx
ole32
MonikerRelativePathTo
CoFreeUnusedLibraries
OleLoad
CoCreateInstance
OleCreateLinkToFileEx
CoIsOle1Class
CoUninitialize
WriteFmtUserTypeStg
CoRegisterPSClsid
GetRunningObjectTable
OleDuplicateData
gdi32
CreateDCW
DeleteObject
FillRgn
ExcludeClipRect
CloseEnhMetaFile
FrameRgn
CreateFontA
CreateDiscardableBitmap
EnumObjects
GetBrushOrgEx
CreateDCA
kernel32
SetThreadLocale
CreateMutexA
WideCharToMultiByte
LocalFree
GetProcessHeap
GetCPInfo
VirtualUnlock
IsBadWritePtr
EnterCriticalSection
HeapCompact
GetModuleHandleA
GetProcAddress
GetCommandLineA
DeleteFileA
SetHandleInformation
VirtualAlloc
GetCurrentThreadId
GetVersion
GetStartupInfoA
DeleteCriticalSection
netapi32
NetQueryDisplayInformation
msvcrt
__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_XcptFilter
_exit
_flushall
fread
_fullpath
fopen
free
_fsopen
fscanf
fwrite
freopen
fputs
fsetpos
fprintf
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ