Static task
static1
Behavioral task
behavioral1
Sample
511ef37de174127c3fcfec30f9e4e48dd0accac27f40ca94ee5bf773c985b5d2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
511ef37de174127c3fcfec30f9e4e48dd0accac27f40ca94ee5bf773c985b5d2.exe
Resource
win10v2004-20220901-en
General
-
Target
511ef37de174127c3fcfec30f9e4e48dd0accac27f40ca94ee5bf773c985b5d2
-
Size
156KB
-
MD5
abf896807b1d9799c7b42b68a5b10fe2
-
SHA1
33c53ba03f7d5955c571af03b15d5735a2b9e60c
-
SHA256
511ef37de174127c3fcfec30f9e4e48dd0accac27f40ca94ee5bf773c985b5d2
-
SHA512
6016e881fb9329811066ba7e258c8293f9638d2bdb6c33727f634213635f1f60f3c2c0ed363081f59fb667b4cb2f17c0628f36b98f80d33497d9c1b911516a79
-
SSDEEP
1536:LhX8oxDzXNrUiYTbVNYvXpCzQepYHSkhi7GbouDQrthyXqHOPOTVZzL2jMB3zBt:xLHVYXXYhCzQ9W7GboWEtMqHOV49
Malware Config
Signatures
Files
-
511ef37de174127c3fcfec30f9e4e48dd0accac27f40ca94ee5bf773c985b5d2.exe windows x86
332c57a081f15ecbd52cd0a107db182d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
FreeLibrary
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileIntA
LoadLibraryA
GetACP
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCPInfo
WriteFile
RtlUnwind
VirtualFree
HeapCreate
GetFileSize
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcAddress
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetProcessHeap
HeapAlloc
_lread
HeapFree
InterlockedIncrement
LocalFree
GetExitCodeThread
Sleep
WritePrivateProfileStringA
CreateThread
InterlockedExchange
WaitForSingleObject
CloseHandle
lstrcmpiA
GetFileAttributesA
GetTempPathA
LocalAlloc
MultiByteToWideChar
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleFileNameA
lstrcatA
_lclose
DeleteFileA
lstrlenA
lstrcpyA
HeapDestroy
LCMapStringW
user32
ReleaseDC
GetDC
FillRect
CreatePopupMenu
GetDesktopWindow
GetWindowRect
SetTimer
SetDlgItemInt
GetDlgItemInt
EndDialog
GetWindowTextLengthA
GetDlgItemTextA
SetDlgItemTextA
DialogBoxParamA
TrackPopupMenu
PeekMessageA
TranslateMessage
DispatchMessageA
GetMessageA
GetMenuItemCount
RemoveMenu
SetRect
CreateWindowExA
LoadIconA
SetWindowPos
SendMessageA
CheckRadioButton
TrackPopupMenuEx
GetMenuItemInfoA
AppendMenuA
SetMenuItemInfoA
CheckMenuItem
wsprintfA
IsDlgButtonChecked
MapWindowPoints
MoveWindow
CallWindowProcA
DestroyMenu
PostMessageA
KillTimer
ShowWindow
ExitWindowsEx
GetWindowLongA
SetWindowTextA
LoadStringA
GetClientRect
SetWindowLongA
EnableWindow
SendDlgItemMessageA
CheckDlgButton
GetDlgItem
GetSystemMenu
IsIconic
EnableMenuItem
GetParent
gdi32
CreateDIBSection
SetStretchBltMode
DeleteObject
GdiFlush
DeleteDC
BitBlt
StretchBlt
GetStockObject
SelectObject
CreateCompatibleDC
comdlg32
GetOpenFileNameA
shell32
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
comctl32
ord6
ord17
CreateToolbarEx
svdvideo
ord78
ord101
ord75
ord84
ord82
ord87
ord100
ord102
mpegsys
ord46
ord36
ord34
ord47
ord51
encodem1v
ord3
ord2
ord1
encmpa
ord8
ord7
ord5
ord4
ord6
ord3
ord2
ord1
ord9
mplex
ord1
mmxaudio
ord81
ord79
ord82
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE