Static task
static1
Behavioral task
behavioral1
Sample
5dcd783b84e3f2d8b4ddbbb724a532d14bec9fd309be80299b669ca7f3c44e8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5dcd783b84e3f2d8b4ddbbb724a532d14bec9fd309be80299b669ca7f3c44e8c.exe
Resource
win10v2004-20220901-en
General
-
Target
5dcd783b84e3f2d8b4ddbbb724a532d14bec9fd309be80299b669ca7f3c44e8c
-
Size
476KB
-
MD5
a24754d9cb9779bddefa66f6ebdc9dc0
-
SHA1
3c4aaa7401766471f325fa761b53d7cb354f320d
-
SHA256
5dcd783b84e3f2d8b4ddbbb724a532d14bec9fd309be80299b669ca7f3c44e8c
-
SHA512
711b7273e7f0c3cce73ddb90a44867696012dfcb3fba2b11a9d1080f6b6c565f2139f3073675fa0e93d59cf8f632e26ea0a2df3e5790199f6d6f9126d5524639
-
SSDEEP
6144:Lb24tiZ5+OYCUkRBIxAHAfLdf5N+QxfkBN+JmV1d3XgneZYb4LfFu4B5n86g6/yP:LPtwDY4SRhESmV1dZYb0fzy660s
Malware Config
Signatures
Files
-
5dcd783b84e3f2d8b4ddbbb724a532d14bec9fd309be80299b669ca7f3c44e8c.exe windows x86
124c991f10abb736d103f28fed349089
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
kernel32
WritePrivateProfileStringW
FlushFileBuffers
CreateFileA
HeapSize
CreateMutexW
CreateDirectoryW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSection
GetPrivateProfileStringW
GetPrivateProfileIntW
GetVersionExW
CloseHandle
ReleaseMutex
GetLastError
GetUserDefaultLangID
ExpandEnvironmentStringsW
SetCurrentDirectoryW
GetLocaleInfoA
LoadLibraryA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
user32
GetFocus
SendMessageW
KillTimer
SetTimer
BeginPaint
EndDialog
GetDlgItem
SetFocus
DialogBoxParamW
GetClientRect
GetWindowRect
LoadImageW
EnableWindow
SetWindowTextW
PostMessageW
EndPaint
DefDlgProcW
RegisterClassExW
LoadCursorW
LoadIconW
LoadStringW
SetWindowPos
gdi32
BitBlt
SelectObject
CreateCompatibleDC
GetObjectW
DeleteObject
DeleteDC
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
SHGetFolderPathW
ShellExecuteExW
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 384KB - Virtual size: 16.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ