Static task
static1
Behavioral task
behavioral1
Sample
512bcbbbe82e34b1497db166cd676ecc31471521d1895fe69870d8025b271cd1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
512bcbbbe82e34b1497db166cd676ecc31471521d1895fe69870d8025b271cd1.exe
Resource
win10v2004-20220812-en
General
-
Target
512bcbbbe82e34b1497db166cd676ecc31471521d1895fe69870d8025b271cd1
-
Size
374KB
-
MD5
7c7b04a7b412d648cc1e49997020b7f6
-
SHA1
45a34312667c0ed3bcabbb12a725fb897c978257
-
SHA256
512bcbbbe82e34b1497db166cd676ecc31471521d1895fe69870d8025b271cd1
-
SHA512
0fd226ebc184486b76550da35468c7333f782b87062ac6d2d2748f2e4829051c2346435b2867ea4ba5badafb323a70f0230c81d79e797efff6224b39e1633efa
-
SSDEEP
6144:AypK8RgNAO1rBrRAngkoZU29BQ2FZ+ESOdENPZTFq9zs1Es/MKBmA:npK8R29VIktdXOPgIWs/MMmA
Malware Config
Signatures
Files
-
512bcbbbe82e34b1497db166cd676ecc31471521d1895fe69870d8025b271cd1.exe windows x86
8d57b8ab4d349ed94596c8c5115d41f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetStdHandle
TerminateProcess
RaiseException
LCMapStringW
GetStringTypeW
HeapFree
Sleep
HeapSize
RtlUnwind
IsProcessorFeaturePresent
lstrcpyW
LocalFree
CloseHandle
CreateToolhelp32Snapshot
LocalAlloc
SetLastError
GetLastError
Thread32Next
HeapCreate
CreateEventA
Thread32First
GlobalAlloc
GetComputerNameA
GetPriorityClass
WriteFile
GetCurrentThread
WaitForSingleObject
GetCurrentProcess
HeapAlloc
lstrlenA
SetFilePointer
SetPriorityClass
GetFileSize
CreateFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStartupInfoW
HeapSetInformation
MultiByteToWideChar
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapReAlloc
user32
SetClipboardData
OpenClipboard
EnableWindow
GetSystemMetrics
SetWindowTextA
GetDialogBaseUnits
MoveWindow
BeginDeferWindowPos
EndPaint
CloseClipboard
GetWindowRect
PostQuitMessage
FillRect
CopyImage
AttachThreadInput
CopyAcceleratorTableA
GetClientRect
SendMessageA
BeginPaint
GetDC
OffsetRect
GetWindowTextA
SetRect
GetWindowLongA
CreateWindowExA
GetClassNameW
EmptyClipboard
GetDlgItem
EndDialog
DefWindowProcA
GetDesktopWindow
SetWindowPos
ShowWindow
gdi32
MoveToEx
BitBlt
LineTo
SetWindowExtEx
DeleteDC
GetDeviceCaps
GetDIBits
CreateDCA
DeleteObject
SelectObject
CreateCompatibleDC
SetMapMode
CreateCompatibleBitmap
Rectangle
Ellipse
SaveDC
Polyline
SetPixelFormat
SetTextAlign
GetStockObject
RestoreDC
CreateSolidBrush
TextOutA
GetBitmapBits
advapi32
IsValidSecurityDescriptor
GetFileSecurityA
MakeSelfRelativeSD
GetSecurityDescriptorSacl
GetSecurityDescriptorLength
ImpersonateSelf
InitializeSecurityDescriptor
AccessCheck
MapGenericMask
OpenThreadToken
netapi32
NetUserEnum
NetShareSetInfo
NetShareGetInfo
psapi
GetProcessMemoryInfo
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
msi
ord178
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ