Static task
static1
Behavioral task
behavioral1
Sample
5b2a800611999614edb40480c23bcb9dfccff5c10d862b6dc5d154441d1d06d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b2a800611999614edb40480c23bcb9dfccff5c10d862b6dc5d154441d1d06d8.exe
Resource
win10v2004-20220812-en
General
-
Target
5b2a800611999614edb40480c23bcb9dfccff5c10d862b6dc5d154441d1d06d8
-
Size
556KB
-
MD5
16de0f468778c14e78d2b289e8da54e6
-
SHA1
790d27ade710e09ece1809d19308530efab5a9eb
-
SHA256
5b2a800611999614edb40480c23bcb9dfccff5c10d862b6dc5d154441d1d06d8
-
SHA512
724eeaf06fbf04c29ade1212d66c80900bd16e9438d8fde9029b8ccc967d9579e99a1d2afa2a607ac5eb3f25c5d1a66a5b7fd84891ac049ac0bec17d4a219b29
-
SSDEEP
12288:hWcUu28QQzLAhpbG1y1CTJ2GtgEM1GwCRLB:gtuv/AhBG1y1yFJF
Malware Config
Signatures
Files
-
5b2a800611999614edb40480c23bcb9dfccff5c10d862b6dc5d154441d1d06d8.exe windows x86
441888fb4575c278771bdad1894751a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW
SendMessageA
EndDialog
GetDlgItem
SetTimer
DialogBoxParamW
SetWindowLongA
CreateDialogParamW
DialogBoxParamA
CreateDialogParamA
IsWindow
GetWindowPlacement
KillTimer
GetWindowLongA
CreateIconFromResource
gdi32
CloseFigure
RectInRegion
GetICMProfileA
StrokeAndFillPath
OffsetViewportOrgEx
Escape
kernel32
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
FreeEnvironmentStringsW
HeapCreate
HeapReAlloc
HeapFree
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
FormatMessageW
GetThreadPriority
LocalUnlock
GetProcessAffinityMask
ResetEvent
GetProcAddress
ConvertThreadToFiber
DecodePointer
CloseHandle
CreateDirectoryW
CreateEventW
CreateFileW
CreateProcessW
DeleteFileW
EnumCalendarInfoW
FindResourceW
FreeLibrary
GetCPInfo
GetCommandLineW
GetCurrentProcess
GetDiskFreeSpaceW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetStdHandle
GetSystemInfo
GetThreadLocale
GetUserDefaultLangID
GetVersionExW
GetWindowsDirectoryW
LoadLibraryW
LoadResource
LockResource
MultiByteToWideChar
ReadFile
RemoveDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SignalObjectAndWait
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetModuleHandleW
LocalAlloc
TlsGetValue
TlsSetValue
GetLocalTime
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 453KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ