Static task
static1
Behavioral task
behavioral1
Sample
5ee54d4dc6014ac602d2070b01ac046ee9db33c7daec0c20799f7c8db664f8c7.exe
Resource
win7-20220812-en
General
-
Target
5ee54d4dc6014ac602d2070b01ac046ee9db33c7daec0c20799f7c8db664f8c7
-
Size
453KB
-
MD5
62b0df3d24e03f52c4afc9afca18e8a0
-
SHA1
a87563353f2814351ed28659eb18d54dcba92906
-
SHA256
5ee54d4dc6014ac602d2070b01ac046ee9db33c7daec0c20799f7c8db664f8c7
-
SHA512
9963c51e8e074325affae9c05bc33afef1a0310e8855921385a26eac914ac68c45eec0169d5b0ff1a16232f54a26cd6ada9a4be96e3bf205267f39c62dce2162
-
SSDEEP
6144:gAIoXOSTbzXtcOamWBfhQIL4AiF/40SSxoLgLExQv9OUvQ71q6IEpGiOpqTMI0k:nXNvWBvYFwzSxoLgYxQ8Uvuq6IEFFTJ
Malware Config
Signatures
Files
-
5ee54d4dc6014ac602d2070b01ac046ee9db33c7daec0c20799f7c8db664f8c7.exe windows x86
f780d050ddaf0eb710a2d3c9fc9681e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileSizeEx
CreateFileW
MoveFileExW
SetFileAttributesW
DeleteFileW
CreateProcessW
GetStartupInfoW
GetProcAddress
OpenProcess
LoadLibraryW
LockResource
FindResourceExW
ExitProcess
TerminateProcess
GlobalUnlock
GlobalLock
GlobalAlloc
GetTempPathW
WriteFile
GetVersionExW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetFileAttributesExW
InterlockedCompareExchange
DeleteAtom
FindAtomW
ReleaseMutex
AddAtomW
OpenThread
GetAtomNameW
WaitForSingleObject
GetSystemTime
LocalFree
FormatMessageW
OutputDebugStringW
ReadFile
SetFilePointerEx
LocalFileTimeToFileTime
SystemTimeToFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetFilePointer
lstrcmpiW
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
LoadLibraryExW
FindResourceW
LoadResource
FreeLibrary
InitializeCriticalSection
lstrlenW
GetModuleFileNameW
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
RaiseException
GetCurrentThreadId
GetCPInfo
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
TlsFree
TlsSetValue
GetLastError
TlsAlloc
TlsGetValue
HeapCreate
GetSystemTimeAsFileTime
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcessId
DeviceIoControl
WideCharToMultiByte
lstrlenA
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
SetLastError
SetCurrentDirectoryW
HeapAlloc
GetProcessHeap
HeapFree
CreateMutexW
GetTickCount
SizeofResource
user32
DispatchMessageW
CreateWindowExW
DefWindowProcW
FindWindowW
ShowWindow
LoadCursorW
GetClassInfoExW
SetWindowLongW
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetClientRect
MapWindowPoints
SetWindowPos
IsWindow
SetForegroundWindow
SetWindowTextW
GetWindowLongW
CallWindowProcW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterWindowMessageW
LoadIconW
InvalidateRect
PostMessageW
MonitorFromPoint
GetMonitorInfoW
DestroyMenu
GetSubMenu
EnableMenuItem
TrackPopupMenu
LoadMenuW
SendMessageW
GetCursorPos
CopyRect
DrawIcon
GetActiveWindow
MessageBoxW
UnregisterClassA
DestroyWindow
PeekMessageW
GetMessageW
RegisterClassExW
IsDialogMessageW
GetShellWindow
GetWindowThreadProcessId
CharNextW
TranslateMessage
gdi32
GetStockObject
GetDeviceCaps
advapi32
RegQueryValueExA
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
DuplicateTokenEx
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
shell32
SHGetFileInfoW
ShellExecuteExW
ShellExecuteW
ord680
SHGetFolderPathW
ExtractIconExW
ole32
CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
oleaut32
SysAllocStringByteLen
SysFreeString
SysAllocString
VariantClear
VariantInit
SysStringByteLen
VarUI4FromStr
DispCallFunc
shlwapi
PathFileExistsW
PathCombineW
PathAppendW
PathRemoveFileSpecW
StrCmpIW
PathFindExtensionW
SHGetValueW
StrCmpNIW
SHSetValueW
StrStrIW
PathFindFileNameW
comctl32
InitCommonControlsEx
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
imm32
ImmDisableIME
Sections
.text Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE