Static task
static1
Behavioral task
behavioral1
Sample
c5eb466494efe6ec3379039dce467ef38bdf573c508d575dbd5468a641c4875f.exe
Resource
win7-20220812-en
General
-
Target
c5eb466494efe6ec3379039dce467ef38bdf573c508d575dbd5468a641c4875f
-
Size
546KB
-
MD5
7d2cf162a39db6d516359e67f469b051
-
SHA1
35e334300139fb7a186b2027c08dc4da1ed507e0
-
SHA256
c5eb466494efe6ec3379039dce467ef38bdf573c508d575dbd5468a641c4875f
-
SHA512
d3f52fba0bdfe8fb0a521a808714a3b1d36c88c22153b5fe6e27372cb98fae51f38f25e1d0f7f60715ac49775ef5be1204c08f133bdb54dcf211eb2e2d468af9
-
SSDEEP
12288:XM77Egn+QPHi/ePw3OPgqY2uBPNPDG0jZf5+lVGbfFn1Ya:c7YSKIA8RMPNPDG0j5hFB
Malware Config
Signatures
Files
-
c5eb466494efe6ec3379039dce467ef38bdf573c508d575dbd5468a641c4875f.exe windows x86
243a7f01617e0086db120546258e4067
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
wintrust
WinVerifyTrust
kernel32
GetUserDefaultLCID
EnumSystemLocalesA
RaiseException
SetEnvironmentVariableA
FlushFileBuffers
WriteConsoleW
CreateFileA
GetFileSize
CreateMutexW
FindFirstFileW
SetFilePointer
WritePrivateProfileStructA
GetLocaleInfoA
VirtualQuery
InterlockedIncrement
MoveFileExW
InterlockedDecrement
CreateDirectoryW
GlobalLock
WaitForSingleObject
InterlockedCompareExchange
OutputDebugStringW
GetWindowsDirectoryA
WriteFile
InitializeCriticalSection
GlobalAlloc
WideCharToMultiByte
Sleep
GetVersionExW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
GetACP
MultiByteToWideChar
GlobalUnlock
GetLastError
GetCurrentDirectoryW
GetThreadLocale
GlobalFree
FindClose
GetPrivateProfileStringA
GetLocalTime
RemoveDirectoryW
GetPrivateProfileStructA
FindNextFileW
DeleteCriticalSection
GetShortPathNameW
GetCurrentThreadId
ReleaseMutex
CloseHandle
DeleteFileW
GetCurrentProcessId
SetFileAttributesW
GetModuleHandleW
GetCurrentProcess
GetTickCount
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
GetVersionExA
GetCommandLineW
GlobalDeleteAtom
FindResourceExW
FindResourceW
FreeLibrary
LoadResource
SetEvent
LoadLibraryW
SizeofResource
IsBadWritePtr
lstrlenW
SetLastError
LocalAlloc
LockResource
CreateEventW
GlobalGetAtomNameW
OpenEventW
GlobalAddAtomW
LocalFree
CreateThread
GetEnvironmentVariableW
InterlockedExchange
SwitchToThread
IsBadReadPtr
SystemTimeToFileTime
LoadLibraryA
GetSystemDirectoryA
lstrlenA
GetShortPathNameA
Module32Next
Module32First
CreateToolhelp32Snapshot
OpenProcess
FindFirstFileA
GetStringTypeA
GetModuleHandleA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
HeapDestroy
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
ExitProcess
VirtualFree
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
CompareStringW
CompareStringA
GetDateFormatA
GetTimeFormatA
GetStringTypeW
LCMapStringA
LCMapStringW
GetCPInfo
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemInfo
VirtualAlloc
VirtualProtect
GetProcessHeap
HeapSize
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
HeapAlloc
HeapFree
HeapReAlloc
IsValidLocale
user32
SetTimer
GetWindowRect
PostQuitMessage
LoadImageW
PostMessageW
KillTimer
GetParent
GetDesktopWindow
SetWindowPos
SendMessageW
SetWindowTextW
DestroyIcon
CallWindowProcW
GetMessageW
IsIconic
MsgWaitForMultipleObjects
SetForegroundWindow
AttachThreadInput
wsprintfW
SetPropW
TranslateMessage
GetForegroundWindow
GetWindowPlacement
BringWindowToTop
PeekMessageW
ShowWindow
FindWindowExW
GetSystemMetrics
GetPropW
DispatchMessageW
DestroyWindow
IsDialogMessageW
GetWindowLongW
SetWindowLongW
EndDialog
CreateDialogParamW
IsWindow
GetWindowThreadProcessId
ole32
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoGetClassObject
CLSIDFromString
oleaut32
CreateDispTypeInfo
VariantCopy
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
CreateStdDispatch
SysAllocStringLen
SysAllocString
SysFreeString
VariantInit
VariantClear
shlwapi
PathFileExistsW
PathStripPathW
PathAppendW
SHGetValueW
PathRemoveFileSpecW
wininet
InternetCrackUrlW
Sections
.text Size: 333KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE