Static task
static1
Behavioral task
behavioral1
Sample
539A0AE816B7322BB468CB99D02C8620E0005783304AA.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
539A0AE816B7322BB468CB99D02C8620E0005783304AA.exe
Resource
win10v2004-20220901-en
General
-
Target
539A0AE816B7322BB468CB99D02C8620E0005783304AA.exe
-
Size
302KB
-
MD5
5e7531a333b69c03901a41e48bbd63a9
-
SHA1
db2a74cd45d2f322f13be18fcf536b3f1347d9d6
-
SHA256
539a0ae816b7322bb468cb99d02c8620e0005783304aa6f678a4fc9b3eeb6f23
-
SHA512
e7b690a8d7b6385ecd731ca33b4143570f2aab0d8547cb4229a008293d8d8c8219f39807fc0a09127d74fa452aeb6f58a38ecd7b6bfa3eaedd6acc8972e91b3c
-
SSDEEP
6144:iGTDMc4XZgiljUmkLKGrfgagDI/LZybSxXZ8CSvzb6ol:X8c4XV8qD4NTdZ8CSvz1
Malware Config
Signatures
Files
-
539A0AE816B7322BB468CB99D02C8620E0005783304AA.exe.exe windows x86
1167b51ad6840458a43b62ce53f81835
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
EndPaint
DrawTextA
FillRect
GetClientRect
BeginPaint
DefWindowProcA
SendMessageA
InvalidateRect
EnableWindow
GetDC
LoadImageA
SetWindowLongA
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
ShowWindow
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
wininet
InternetCombineUrlA
FtpSetCurrentDirectoryA
InternetCrackUrlA
GopherFindFirstFileA
FtpDeleteFileW
InternetGoOnline
dbghelp
FindExecutableImageEx
DbgHelpCreateUserDumpW
SymGetSymPrev
SymEnumerateSymbols
SymGetSymPrev64
kernel32
FindFirstVolumeA
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
HeapSize
LoadLibraryA
RtlUnwind
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapReAlloc
VirtualAlloc
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
GetTimeZoneInformation
WideCharToMultiByte
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
OpenMutexA
GetLastError
CreateMutexA
GetFileTime
GetLogicalDriveStringsW
OpenJobObjectA
GetEnvironmentVariableW
RequestDeviceWakeup
ExpandEnvironmentStringsW
GetFileSizeEx
FindNextVolumeA
GetCPInfoExA
GetLongPathNameW
GetLongPathNameA
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ