Static task
static1
Behavioral task
behavioral1
Sample
52d332629e1bd6d8472a45a1491459fea72667856c69583595a377a8a7bcdca2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52d332629e1bd6d8472a45a1491459fea72667856c69583595a377a8a7bcdca2.exe
Resource
win10v2004-20220812-en
General
-
Target
52d332629e1bd6d8472a45a1491459fea72667856c69583595a377a8a7bcdca2
-
Size
652KB
-
MD5
45f7d1c23a44b5ef9f772f34aed9eec0
-
SHA1
930e9caa01d99db3ac4260fb4b38dac1df40cb04
-
SHA256
52d332629e1bd6d8472a45a1491459fea72667856c69583595a377a8a7bcdca2
-
SHA512
73a7752776bd3a8d483923576e1cd4cbef875f5308000adc64bb2d211f81a4fe92a254b75e68ea37e08609a50fc5bff810be5899d8394fab8ba76a1ba65b96b4
-
SSDEEP
12288:kWtJe3+U7fK4hRFNLbHLQRuMaFJhOnejjNX+ECpzxGxQKq1a:kI2HPLbrcaEnsNOpNATAa
Malware Config
Signatures
Files
-
52d332629e1bd6d8472a45a1491459fea72667856c69583595a377a8a7bcdca2.exe windows x86
44c4c7b0f82bfa3560e9ecd33f2ba16c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
IsBadReadPtr
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
FindResourceA
GlobalAddAtomA
GetProfileStringA
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
TerminateProcess
HeapFree
HeapAlloc
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetStartupInfoW
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryW
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetTempFileNameW
GetFileAttributesW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpiA
GetCurrentThread
lstrcmpW
GlobalGetAtomNameW
lstrcmpA
FormatMessageW
LocalFree
GetModuleFileNameW
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
lstrcpynW
GetVolumeInformationW
FindFirstFileW
FindClose
LoadLibraryW
DeleteFileW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
GetLastError
WideCharToMultiByte
lstrlenW
InterlockedDecrement
InterlockedIncrement
MulDiv
SetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrlenA
MultiByteToWideChar
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
GetProcAddress
LockResource
FindResourceW
LoadResource
GlobalAlloc
GlobalFree
GlobalLock
UnmapViewOfFile
CloseHandle
GlobalUnlock
SetStdHandle
user32
DestroyMenu
GetDesktopWindow
ReleaseCapture
LoadAcceleratorsW
SetRectEmpty
RedrawWindow
DefMDIChildProcW
DrawMenuBar
TranslateAcceleratorW
TranslateMDISysAccel
DefFrameProcW
BringWindowToTop
CharUpperW
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
wvsprintfW
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
LoadIconW
PostMessageW
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
LoadMenuW
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxW
IsChild
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetMessageW
GetMenuItemID
SetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
ValidateRect
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
GetClientRect
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
OffsetRect
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
GetParent
SetMenu
ReuseDDElParam
UnpackDDElParam
PostQuitMessage
SetScrollRange
GetCursorPos
GetWindowLongW
GetDlgItem
IsWindowEnabled
ReleaseDC
SendMessageW
EnableWindow
GetDC
UpdateWindow
InvalidateRect
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
SetCursor
LoadCursorW
PtInRect
SetWindowContextHelpId
SetParent
PostThreadMessageW
SetCapture
LockWindowUpdate
GetDCEx
RegisterClipboardFormatW
WindowFromPoint
KillTimer
SetTimer
GetTabbedTextExtentA
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableW
CharNextW
CallNextHookEx
TranslateMessage
DestroyIcon
GetMenuStringW
DeleteMenu
InsertMenuW
InflateRect
LoadStringW
GetSysColorBrush
GetClassNameW
IsZoomed
FindWindowW
FillRect
SetRect
DestroyCursor
GetSubMenu
MapDialogRect
ShowOwnedPopups
gdi32
SetBkColor
CreateBitmap
StartDocW
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
SetTextColor
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
PatBlt
CreateRectRgnIndirect
DPtoLP
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCW
LPtoDP
GetTextExtentPoint32W
GetTextMetricsW
GetCharWidthW
CreateFontW
CreateFontIndirectW
GetMapMode
SetRectRgn
CombineRgn
GetTextColor
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceW
GetTextExtentPoint32A
GetWindowOrgEx
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetDeviceCaps
DeleteObject
GetObjectW
CreateDIBitmap
StretchDIBits
SelectPalette
Ellipse
Rectangle
CreatePen
GetTextExtentPointA
ExtTextOutA
CreateSolidBrush
comdlg32
GetSaveFileNameW
PrintDlgW
GetOpenFileNameW
CommDlgExtendedError
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
GetFileSecurityW
RegCloseKey
RegOpenKeyW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegQueryValueExW
SetFileSecurityW
RegDeleteValueW
shell32
DragQueryFileW
DragFinish
SHGetFileInfoW
ExtractIconW
comctl32
ord17
ImageList_Destroy
oledlg
OleUIBusyW
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
olepro32
ord253
oleaut32
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
Sections
.text Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ