Static task
static1
Behavioral task
behavioral1
Sample
b5b185235b7e5e182c4dcddfeb77cf00db9db0cbadced8027c2db55515a12339.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5b185235b7e5e182c4dcddfeb77cf00db9db0cbadced8027c2db55515a12339.exe
Resource
win10v2004-20220812-en
General
-
Target
b5b185235b7e5e182c4dcddfeb77cf00db9db0cbadced8027c2db55515a12339
-
Size
460KB
-
MD5
ebdecc0aa52191200614a92ed3eb45aa
-
SHA1
e41e3055f13b312a70a5743965ed7044b89e178d
-
SHA256
b5b185235b7e5e182c4dcddfeb77cf00db9db0cbadced8027c2db55515a12339
-
SHA512
0a2c7a2903887937d8350b57dc2a9dab5680b715a0eb98528e79b079a7b39a3e6c2c17ddacac8c2ae6d47f10d6b289a7fd1a1b835d133fc55b8159ee34dc1d66
-
SSDEEP
12288:gbdWQwFlApraBrs+Y3bi4ZkviwHWFcvP+Oiy1d:gBpwfuaBrdY3b1bcIG
Malware Config
Signatures
Files
-
b5b185235b7e5e182c4dcddfeb77cf00db9db0cbadced8027c2db55515a12339.exe windows x86
15d7bd8ef17ac5476cf86376fb7705bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
FileTimeToLocalFileTime
Sleep
WaitForMultipleObjects
GetTickCount
SetPriorityClass
GetCurrentProcess
lstrlenA
lstrcatA
GetLastError
ReadFile
GetStdHandle
WriteFile
MoveFileW
DeleteFileW
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
SetCurrentDirectoryA
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
CreateDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetShortPathNameA
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
GetFullPathNameW
SearchPathW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindFirstChangeNotificationW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetFileSize
SetFilePointer
GetFileInformationByHandle
SetEndOfFile
CreateFileA
CompareFileTime
FileTimeToSystemTime
EnterCriticalSection
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
GetVersionExA
UnmapViewOfFile
ExpandEnvironmentStringsW
MapViewOfFile
CreateFileMappingA
GetFileSizeEx
GetCommandLineW
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetLocaleInfoA
GetLocaleInfoW
IsValidCodePage
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
HeapReAlloc
FatalAppExitA
ExitProcess
HeapSize
IsDebuggerPresent
TerminateProcess
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
CreateThread
GetCurrentThreadId
GetProcAddress
DeleteCriticalSection
ExitThread
HeapFree
HeapAlloc
RtlUnwind
RaiseException
user32
CharPrevExA
MoveWindow
InvalidateRect
SetFocus
CharToOemA
CharLowerW
CharUpperW
CharLowerA
CharUpperA
DialogBoxParamW
CreateDialogParamW
DialogBoxParamA
CreateDialogParamA
GetDialogBaseUnits
SystemParametersInfoA
GetDlgCtrlID
GetWindowLongA
SetWindowLongA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
GetWindowTextA
GetWindowTextLengthA
CreateWindowExA
SendMessageW
LoadStringW
LoadStringA
CharPrevA
CharNextA
MessageBoxW
LoadIconA
LoadCursorA
wsprintfA
SetDlgItemTextA
ShowWindow
KillTimer
SetTimer
PostMessageA
ScreenToClient
IsDlgButtonChecked
IsWindow
EndDialog
SendMessageA
GetWindowRect
MapDialogRect
GetDlgItem
SetCursor
gdi32
GetStockObject
shell32
DragFinish
SHGetPathFromIDListA
SHBrowseForFolderA
DragQueryFileA
DragQueryFileW
SHGetMalloc
SHGetFileInfoA
ole32
CoInitialize
CoUninitialize
oleaut32
VariantCopy
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
shlwapi
PathFileExistsW
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ