Static task
static1
Behavioral task
behavioral1
Sample
da189cbe4a72900128fc4799d3516f4182c9e4125a870dfaa7facb6dde5c0c5d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da189cbe4a72900128fc4799d3516f4182c9e4125a870dfaa7facb6dde5c0c5d.exe
Resource
win10v2004-20220812-en
General
-
Target
da189cbe4a72900128fc4799d3516f4182c9e4125a870dfaa7facb6dde5c0c5d
-
Size
768KB
-
MD5
a0c42a15069985955f6a75e8535c9480
-
SHA1
7a074a43ced64cfddb652d4d5e5d925ec0034a3f
-
SHA256
da189cbe4a72900128fc4799d3516f4182c9e4125a870dfaa7facb6dde5c0c5d
-
SHA512
aac4b3677a8aba71bbef25448cd82abc977063841efb2932b7f2bd204fafb499b9692a9dec5b65e13dc51bb1e9c22473a222f101c3ec330f1a76193c01649dc6
-
SSDEEP
12288:WDfy3v6FAh+3P52bWiT/khVxu9nvmxqBM4PVzPo53JWw+w9hYXo9OKjFjx730HGa:Wzyf6FAh+K5T/khVA/lwFgw1YXo9OKj
Malware Config
Signatures
Files
-
da189cbe4a72900128fc4799d3516f4182c9e4125a870dfaa7facb6dde5c0c5d.exe windows x86
42fc2d50eb139713ae384ec2c7afc3ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeInitializeW
GetMenuBarInfo
EnumWindowStationsW
GetWindowThreadProcessId
PostThreadMessageA
DdeAccessData
PeekMessageW
LoadStringA
LockWindowUpdate
GetScrollInfo
UnregisterHotKey
CreateMDIWindowA
GetUserObjectInformationA
DdeQueryStringA
InternalGetWindowText
BroadcastSystemMessage
MapVirtualKeyExA
DrawStateW
GetClipboardData
IsCharLowerW
DdeClientTransaction
GetListBoxInfo
GetThreadDesktop
DefWindowProcW
CreateWindowExA
GetClassWord
RegisterClassA
ShowWindow
BroadcastSystemMessageW
MessageBoxA
DestroyWindow
DdeDisconnectList
IsIconic
GetUpdateRect
IsWindowUnicode
RegisterClassExA
MonitorFromWindow
GetActiveWindow
kernel32
SetCriticalSectionSpinCount
lstrcatA
VirtualAlloc
GetTimeFormatA
lstrlenW
IsBadReadPtr
GetFileType
FlushFileBuffers
MoveFileExW
GetCurrentThread
SleepEx
FreeEnvironmentStringsA
GetLastError
GetACP
GetCurrentProcess
EnumDateFormatsExA
GetProcessHeap
GetEnvironmentStringsW
SetConsoleCtrlHandler
FormatMessageA
IsDebuggerPresent
GetTimeFormatW
LoadLibraryA
SetLastError
CloseHandle
OpenSemaphoreW
EnumResourceNamesA
GlobalHandle
GetStringTypeW
MultiByteToWideChar
OutputDebugStringW
GetProcAddress
CreateNamedPipeW
FindFirstFileExW
SetFilePointer
HeapValidate
WriteFile
InitializeCriticalSection
HeapFree
CreateFileA
ExitProcess
lstrcmpA
GetStdHandle
GetDateFormatA
GetPrivateProfileStructA
GetCommandLineA
GetUserDefaultLCID
SetUnhandledExceptionFilter
EnumSystemLocalesA
WriteConsoleW
SetLocalTime
GetTempPathA
GetOEMCP
DebugBreak
CompareStringA
LeaveCriticalSection
GetTickCount
GetComputerNameA
GetConsoleCP
FindNextFileW
SystemTimeToFileTime
EnterCriticalSection
GlobalGetAtomNameA
MapViewOfFile
LoadResource
InterlockedIncrement
UnhandledExceptionFilter
DeleteFiber
VirtualQuery
SetStdHandle
GetCPInfo
QueryPerformanceCounter
GetModuleFileNameA
ReadFile
SetEnvironmentVariableA
CreateFileMappingW
GetCommandLineW
InterlockedExchange
EnumSystemLocalesW
FindFirstFileW
GetModuleHandleA
CreateNamedPipeA
GetConsoleMode
DeleteCriticalSection
GetStartupInfoA
EnumDateFormatsW
GetStringTypeExA
WriteConsoleA
LoadLibraryW
GetEnvironmentStrings
LCMapStringA
GetCurrentProcessId
WritePrivateProfileSectionW
OpenMutexA
CompareStringW
TlsAlloc
TlsGetValue
GlobalFindAtomA
InterlockedDecrement
EnumResourceTypesW
TlsFree
FreeLibrary
WriteProfileSectionA
IsValidCodePage
GetAtomNameA
FreeEnvironmentStringsW
HeapReAlloc
CreateMutexA
GetProcessShutdownParameters
GetTimeZoneInformation
OutputDebugStringA
GetStartupInfoW
WaitForSingleObjectEx
lstrlen
LCMapStringW
GetStringTypeA
HeapDestroy
GetPrivateProfileSectionNamesW
GetSystemTimeAsFileTime
CreateMailslotA
TlsSetValue
CreateThread
LocalLock
GetShortPathNameA
SetThreadAffinityMask
IsValidLocale
GetLocaleInfoW
GetModuleFileNameW
RtlUnwind
GetTempFileNameA
HeapAlloc
HeapCreate
GetFileSize
TerminateProcess
GetLocaleInfoA
GetConsoleOutputCP
GetCurrentThreadId
ReadConsoleOutputA
CommConfigDialogW
CreatePipe
SetHandleCount
RaiseException
GetFileTime
GetThreadLocale
VirtualFree
WideCharToMultiByte
WriteProfileStringA
GetModuleHandleW
lstrlenA
ReadConsoleOutputCharacterW
GetVersionExA
OpenMutexW
ExitThread
advapi32
RegFlushKey
CryptHashSessionKey
CryptEnumProviderTypesA
LookupAccountNameA
comctl32
InitCommonControlsEx
ImageList_SetImageCount
Sections
.text Size: 308KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ