Static task
static1
Behavioral task
behavioral1
Sample
57a3b72362d2a5b57012cac2ec438e48c5534d3930c778c0561a363df8ba9bfd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57a3b72362d2a5b57012cac2ec438e48c5534d3930c778c0561a363df8ba9bfd.exe
Resource
win10v2004-20220812-en
General
-
Target
57a3b72362d2a5b57012cac2ec438e48c5534d3930c778c0561a363df8ba9bfd
-
Size
70KB
-
MD5
6461c26730bf5a7237ac1d9f013025d0
-
SHA1
3238735706c3cda939c632dd538f2b014927f145
-
SHA256
57a3b72362d2a5b57012cac2ec438e48c5534d3930c778c0561a363df8ba9bfd
-
SHA512
bda40c39ef7504a8d92eeae4a4a573b10e3d0b35005d494ca48df217c160485e14263e589d479dd76e80bc3f28d7c7dacac2b395b1213a3de399a61f911f3081
-
SSDEEP
768:Gnn3wmYmzNcXHjrNfwsDSM0y7iZoJwGnh/WCJzjWp2pVbr6Tubj4eIw2G4fW4zsq:RpmzcHvPDyy7UIECZWpUBrq8sO4QZE
Malware Config
Signatures
Files
-
57a3b72362d2a5b57012cac2ec438e48c5534d3930c778c0561a363df8ba9bfd.exe windows x86
baa222d47558a89bcb784651a84fdd4e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ExtractAssociatedIconA
ShellExecuteExA
DragQueryFileA
DragFinish
ShellAboutA
ord62
DragAcceptFiles
olecli32
ord11
ord46
ord27
ord2
ord39
ord37
ord35
ord42
ord28
ord14
ord15
ord36
ord21
ord41
ord43
ord44
ord9
ord10
ord45
ord20
ord25
ord3
ord22
ord32
ord29
ord13
ord23
ord18
ord19
ord24
ord40
ord6
ord4
ord12
olesvr32
ord4
ord7
ord5
ord2
ord3
ord6
ord8
ord10
advapi32
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegQueryValueA
msvcrt
memmove
strchr
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_except_handler3
_controlfp
__set_app_type
kernel32
lstrcmpA
MultiByteToWideChar
FindClose
GlobalDeleteAtom
GlobalAddAtomA
FindFirstFileA
LocalLock
LocalUnlock
LocalFree
GetTempPathA
GetTempFileNameA
GlobalHandle
_lwrite
Sleep
AddAtomA
CreateThread
_lopen
_lread
DeleteAtom
DeleteFileA
GetAtomNameA
WaitForSingleObject
CloseHandle
GetLastError
GlobalAlloc
GlobalReAlloc
GlobalFree
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
LocalAlloc
WideCharToMultiByte
lstrcatA
GetACP
MulDiv
GetThreadLocale
lstrcmpiA
GlobalLock
GlobalUnlock
OpenFile
_lcreat
_llseek
_lclose
lstrcpyA
GetProcAddress
lstrlenA
gdi32
CopyMetaFileA
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
SetTextColor
SetBkColor
SelectObject
PatBlt
GetStockObject
TranslateCharsetInfo
CreateFontIndirectA
GetTextExtentPoint32A
DeleteObject
GetDeviceCaps
GetLayout
SetLayout
SetBkMode
SetTextAlign
TextOutA
user32
IsWindowVisible
PeekMessageA
OemToCharA
EnumThreadWindows
SetFocus
IsRectEmpty
RegisterClipboardFormatA
SetRectEmpty
DrawIcon
GetMenu
SendDlgItemMessageA
GetDlgItemTextA
CheckDlgButton
DestroyIcon
CharUpperBuffA
CharLowerA
CharNextA
OffsetRect
TranslateMessage
GetScrollRange
ReleaseDC
GetDC
CreateWindowExA
LoadStringA
LoadCursorA
GetSysColorBrush
LoadAcceleratorsA
DispatchMessageA
ScrollWindow
TranslateAcceleratorA
GetMessageA
SendMessageA
ShowWindow
GetTopWindow
SetDlgItemTextA
wsprintfA
EndDialog
GetSystemMetrics
MessageBoxA
DialogBoxParamA
IsWindow
EnableMenuItem
DestroyMenu
InsertMenuA
CreatePopupMenu
DeleteMenu
GetClientRect
SetWindowTextA
IsClipboardFormatAvailable
GetSubMenu
PostQuitMessage
LoadIconA
InvalidateRect
CloseClipboard
GetClipboardData
OpenClipboard
PostMessageA
DefWindowProcA
RegisterClassA
DestroyWindow
EnableScrollBar
EnableWindow
CheckRadioButton
SetScrollPos
GetScrollPos
IsDlgButtonChecked
SetWindowPos
GetWindowDC
SetClipboardData
EmptyClipboard
SystemParametersInfoA
EndPaint
FillRect
SetRect
BeginPaint
ReleaseCapture
ScreenToClient
SetCursor
SetCapture
IsIconic
DrawTextA
GetSysColor
UpdateWindow
BringWindowToTop
IsWindowEnabled
GetDlgItem
GetKeyState
DrawFocusRect
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE