Static task
static1
Behavioral task
behavioral1
Sample
5b6612171efe31b735b3402bd84594c1bd5a238808377f3085c3bab5498b49bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b6612171efe31b735b3402bd84594c1bd5a238808377f3085c3bab5498b49bb.exe
Resource
win10v2004-20220812-en
General
-
Target
5b6612171efe31b735b3402bd84594c1bd5a238808377f3085c3bab5498b49bb
-
Size
129KB
-
MD5
448b27e6be4a79f218b8aef70644b900
-
SHA1
4ea73a79b24589251db2a4cadfe12311d94d6567
-
SHA256
5b6612171efe31b735b3402bd84594c1bd5a238808377f3085c3bab5498b49bb
-
SHA512
4cc1eb9c363a0d5e0c60ec9139f13459120ea453050e3d0895442982355a964df2a92aefb78449ba5a70f8e548c0fb749ab8da1f2bbe78dae0051ea52680b9fc
-
SSDEEP
3072:uAHoaZlktBeQ+orMbihmeyh52tBH675D+QW:uABHkWbxfa
Malware Config
Signatures
Files
-
5b6612171efe31b735b3402bd84594c1bd5a238808377f3085c3bab5498b49bb.exe windows x86
0ce95a8f364f5bbe11f97ed20f3299f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
ChangeClipboardChain
DestroyMenu
OpenInputDesktop
GetWindowDC
MoveWindow
SetMenuItemInfoA
AppendMenuA
CreatePopupMenu
SetWindowTextA
DestroyIcon
LoadIconA
InvalidateRect
CharLowerA
LoadBitmapA
KillTimer
IsZoomed
IsDlgButtonChecked
EnableMenuItem
IsWindowEnabled
SetFocus
GetCursorPos
ScreenToClient
SendMessageA
OpenClipboard
CloseClipboard
CallWindowProcA
MessageBeep
wsprintfA
MessageBoxA
CharUpperA
GetClipboardData
EnumClipboardFormats
EmptyClipboard
ClientToScreen
SystemParametersInfoA
SystemParametersInfoW
GetCapture
shell32
ShellExecuteA
DragAcceptFiles
DragFinish
SHGetFileInfoA
DragQueryFileA
advapi32
GetFileSecurityW
gdi32
GetDeviceGammaRamp
GetSystemPaletteUse
CreateCompatibleDC
GetLogColorSpaceA
GetNearestColor
SetMetaRgn
SetPixelV
GetArcDirection
SetViewportOrgEx
GetTextMetricsW
GetPixel
SelectPalette
RectInRegion
GetKerningPairsA
GetWorldTransform
GetPolyFillMode
GetTextFaceA
dbghelp
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
crypt32
CertFreeCertificateContext
comctl32
ImageList_Add
InitCommonControlsEx
ImageList_Remove
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
kernel32
EnterCriticalSection
LeaveCriticalSection
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
GetCPInfo
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapCreate
HeapSize
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
InterlockedDecrement
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
RtlCaptureStackBackTrace
DisconnectNamedPipe
LocalAlloc
DecodePointer
AssignProcessToJobObject
MapUserPhysicalPages
RequestWakeupLatency
GetTapeStatus
GlobalDeleteAtom
lstrcmpW
CreateEventW
WriteProcessMemory
VirtualAlloc
lstrcpyW
FindResourceExW
SetStdHandle
FindFirstFileA
MulDiv
Sleep
ReadFile
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
ReadProcessMemory
OpenProcess
CloseHandle
SetThreadPriority
SetCurrentDirectoryA
ExitProcess
VirtualLock
VirtualUnlock
GetPrivateProfileStringA
WritePrivateProfileStringA
SetEndOfFile
CreateFileMappingA
MapViewOfFile
CopyFileA
lstrlenA
lstrcatA
lstrcpynA
CreateProcessA
SetFileAttributesA
GetSystemTimeAsFileTime
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ