Static task
static1
Behavioral task
behavioral1
Sample
19c4c55842810cb3ab3dd28b16a20f7e319ce7703060e1e798e6f0c3b93e7869.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19c4c55842810cb3ab3dd28b16a20f7e319ce7703060e1e798e6f0c3b93e7869.exe
Resource
win10v2004-20220812-en
General
-
Target
19c4c55842810cb3ab3dd28b16a20f7e319ce7703060e1e798e6f0c3b93e7869
-
Size
1.0MB
-
MD5
50b27a17f9aab4fb993c0170e10121ea
-
SHA1
59416f3a4ed23eca49c8bcd6ed6e1d5bd68094b7
-
SHA256
19c4c55842810cb3ab3dd28b16a20f7e319ce7703060e1e798e6f0c3b93e7869
-
SHA512
4410480bc7ee77f204f837e1f0af8333590d02c79d899fa8b330e041c00b0346a9fcfb4c2af1be818a31773c0ac77ab0c7a739b4e48fb34bbcd7ecb01f278ac6
-
SSDEEP
24576:wFQGVQJU3XlgxCWjO8FzzNV28rZ/zgWHTSXpTxY2:wJnnlgIUlFdI8ltTSX/Y2
Malware Config
Signatures
Files
-
19c4c55842810cb3ab3dd28b16a20f7e319ce7703060e1e798e6f0c3b93e7869.exe windows x86
f4ab050396b0e0003c390044c4ee92a5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetPriorityClass
GetCurrentProcess
Sleep
lstrlenW
lstrcatW
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
FormatMessageW
LocalFree
GetFullPathNameW
CreateDirectoryW
SetFileTime
CreateFileW
GetTempPathW
GetCurrentDirectoryW
SetLastError
MoveFileW
RemoveDirectoryW
CloseHandle
DeleteFileW
SetFileAttributesW
FindFirstFileW
FindClose
FindNextFileW
GetFileSize
SetFilePointer
SetEndOfFile
FileTimeToSystemTime
GetModuleHandleW
GetSystemInfo
FileTimeToDosDateTime
DosDateTimeToFileTime
VirtualFree
VirtualAlloc
GetVersionExW
WaitForSingleObject
SetEvent
InitializeCriticalSection
ReleaseSemaphore
ResetEvent
CreateSemaphoreW
CreateEventW
GetTempFileNameW
FreeResource
FindResourceW
CreateProcessW
SizeofResource
GetExitCodeProcess
GetFileAttributesW
LockResource
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
RtlUnwind
GetSystemTimeAsFileTime
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
RaiseException
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ExitProcess
HeapSize
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
GetStdHandle
ReadFile
WriteFile
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetStartupInfoW
HeapSetInformation
GetCommandLineA
CreateThread
ExitThread
HeapAlloc
HeapReAlloc
HeapFree
EncodePointer
DecodePointer
LoadResource
DeleteCriticalSection
user32
SetWindowTextW
MoveWindow
MessageBoxW
CharPrevExA
SendMessageW
EndDialog
GetClientRect
SetWindowPos
AnimateWindow
EnableWindow
GetWindowTextLengthW
GetWindowTextW
LoadStringW
CreateWindowExW
DialogBoxParamW
GetWindowLongW
SystemParametersInfoW
SetWindowLongW
CharLowerW
CharUpperW
SetCursor
SetTimer
PostMessageW
KillTimer
GetParent
LoadCursorW
wsprintfW
LoadIconW
ShowWindow
SetDlgItemTextW
CheckDlgButton
IsDlgButtonChecked
ScreenToClient
GetWindowRect
MapDialogRect
InvalidateRect
GetDlgItem
advapi32
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetFileInfoW
SHGetSpecialFolderPathW
ShellExecuteW
ole32
OleInitialize
CoCreateInstance
oleaut32
SysFreeString
SysAllocStringByteLen
VariantCopy
VariantClear
SysAllocString
comctl32
InitCommonControlsEx
Sections
.text Size: 537KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ