Static task
static1
Behavioral task
behavioral1
Sample
5e226e8841f662a3af298b8240eb830a67de9f0284eccbc0f1f731c65ba4300e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e226e8841f662a3af298b8240eb830a67de9f0284eccbc0f1f731c65ba4300e.exe
Resource
win10v2004-20220812-en
General
-
Target
5e226e8841f662a3af298b8240eb830a67de9f0284eccbc0f1f731c65ba4300e
-
Size
796KB
-
MD5
1a1958dfde6d2b8ca67fc94f1c410a55
-
SHA1
c897950b329fca1611950237d035feb60f400c4a
-
SHA256
5e226e8841f662a3af298b8240eb830a67de9f0284eccbc0f1f731c65ba4300e
-
SHA512
b3628cf9577a60eece05d88354a55c27f79cd2b14a0c8dfb9341977f6677a237a248c135f656af25744f6c2d6f7679e3bda503fe060cb700796a5064201991e3
-
SSDEEP
24576:XS9peoEoJmx1wYnwyxlL09JpWszRVpdLnPGln:gij1wkTI+sLLnPK
Malware Config
Signatures
Files
-
5e226e8841f662a3af298b8240eb830a67de9f0284eccbc0f1f731c65ba4300e.exe windows x86
a54fc5d24a62e369306ceab4678075f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleW
PageSetupDlgA
GetSaveFileNameW
kernel32
OpenWaitableTimerW
IsBadWritePtr
HeapDestroy
InterlockedIncrement
MapViewOfFile
GetCurrencyFormatA
GetCommandLineA
CopyFileExA
TlsGetValue
SetLastError
GlobalSize
CreateMutexA
QueryPerformanceCounter
GetTimeZoneInformation
FreeEnvironmentStringsA
TlsFree
SetUnhandledExceptionFilter
CreateFileA
TlsSetValue
SetStdHandle
UnmapViewOfFile
CloseHandle
LoadResource
TlsAlloc
GetStartupInfoA
LocalHandle
GetLastError
GetProcAddress
MoveFileW
SetComputerNameA
FillConsoleOutputCharacterA
OpenMutexA
VirtualAlloc
lstrcmpiA
GetFileType
GetDiskFreeSpaceA
GetEnvironmentStrings
RaiseException
GetStdHandle
SetFileTime
InitializeCriticalSectionAndSpinCount
SetFilePointer
LoadLibraryA
DosDateTimeToFileTime
FreeEnvironmentStringsW
SetConsoleCursorInfo
FlushFileBuffers
GlobalReAlloc
GlobalFix
ReadFile
FindNextFileW
CreateThread
InterlockedDecrement
UnhandledExceptionFilter
GetConsoleCP
LCMapStringA
DeleteCriticalSection
WriteFile
VirtualFree
GetVersion
SetConsoleActiveScreenBuffer
GetCurrentThreadId
GetCurrentProcessId
GetSystemInfo
GetTickCount
GetCurrentThread
GetStartupInfoW
GetPrivateProfileStructW
MultiByteToWideChar
InterlockedExchange
LCMapStringW
SetEnvironmentVariableA
SetHandleCount
VirtualQuery
CompareStringA
OpenFileMappingA
FileTimeToDosDateTime
GetThreadTimes
InterlockedCompareExchange
GetCurrencyFormatW
FileTimeToLocalFileTime
WideCharToMultiByte
GetCommandLineW
FillConsoleOutputCharacterW
HeapCreate
Sleep
IsDebuggerPresent
CompareStringW
HeapFree
FormatMessageA
GetLogicalDriveStringsW
WaitForDebugEvent
EnterCriticalSection
RtlUnwind
LeaveCriticalSection
lstrcmpA
HeapReAlloc
GetShortPathNameA
GetNamedPipeInfo
GetModuleHandleA
GetSystemTimeAsFileTime
ExitProcess
GetMailslotInfo
GetModuleFileNameW
GetCPInfo
GetSystemTime
GetSystemDirectoryW
GetStringTypeW
GetEnvironmentStringsW
GetModuleHandleW
TerminateProcess
GetCurrentProcess
CreateFileW
GetStringTypeA
CommConfigDialogA
GetLocalTime
InitializeCriticalSection
GetModuleFileNameA
HeapAlloc
wininet
UnlockUrlCacheEntryStream
GetUrlCacheConfigInfoA
FtpRemoveDirectoryW
RegisterUrlCacheNotification
SetUrlCacheEntryInfoA
DeleteUrlCacheEntry
FtpCommandA
user32
MonitorFromPoint
LoadImageA
GetClassWord
AdjustWindowRectEx
DdeDisconnect
GetMenu
CreateDialogParamW
RegisterClassExA
GetWindowTextA
PostQuitMessage
CharNextA
GetClipboardFormatNameA
EnumDisplaySettingsA
IsDialogMessage
SetDebugErrorLevel
RealGetWindowClass
GetClipboardFormatNameW
CallMsgFilter
MessageBoxW
IsCharUpperW
MapVirtualKeyW
LoadStringW
DefWindowProcA
DrawMenuBar
GetInputDesktop
RegisterClassA
DdeQueryStringW
SubtractRect
GetTitleBarInfo
SwitchToThisWindow
GetClassNameW
CharToOemBuffA
SetProcessWindowStation
CallWindowProcA
UnregisterClassA
PeekMessageW
DefWindowProcW
DrawFrame
CharPrevExA
SetFocus
CreateWindowStationW
InsertMenuA
ShowWindow
SetWindowsHookW
DestroyWindow
CallMsgFilterW
BroadcastSystemMessage
DdeReconnect
EnumThreadWindows
CreateCaret
SetDoubleClickTime
DrawAnimatedRects
ShowWindowAsync
GetWindowRect
DlgDirSelectComboBoxExW
CharNextExA
DdeClientTransaction
FindWindowA
PostMessageA
FindWindowExW
GrayStringA
BroadcastSystemMessageA
RegisterClassW
CreateWindowExA
gdi32
ExtCreateRegion
GetCharABCWidthsFloatA
CopyMetaFileW
GetDCOrgEx
SelectClipPath
shell32
ExtractIconA
SHGetMalloc
comctl32
ImageList_DragEnter
ImageList_GetIconSize
InitCommonControlsEx
CreatePropertySheetPageW
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_Duplicate
MakeDragList
ImageList_Merge
CreateStatusWindowA
ImageList_Remove
ImageList_Destroy
ImageList_LoadImageW
Sections
.text Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 408KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ