Static task
static1
Behavioral task
behavioral1
Sample
51f02d3c092fe13da25401147053fac23cf51f1a519e13de319a288b3139e2fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
51f02d3c092fe13da25401147053fac23cf51f1a519e13de319a288b3139e2fb.exe
Resource
win10v2004-20220812-en
General
-
Target
51f02d3c092fe13da25401147053fac23cf51f1a519e13de319a288b3139e2fb
-
Size
231KB
-
MD5
0ab5ee40c15ee107a3f6d3c643f09373
-
SHA1
5b21d3ff035459a796ef821cc97653628f6d49f0
-
SHA256
51f02d3c092fe13da25401147053fac23cf51f1a519e13de319a288b3139e2fb
-
SHA512
8957d90c629217f8aed3de29a5d7abb7374fc5f659c1852f435b667d4c68ee1a236f253c5088e639eb30214c9ae0313067a696337e4c8eebabcd166f62914478
-
SSDEEP
3072:v3/19e4DXXuY3mSNRQitpt8z6pVi1WZLnArfnBY9T5XiwzrpA6:v3/1rDXPmSNRntpwcV4WZLArveRvrpA
Malware Config
Signatures
Files
-
51f02d3c092fe13da25401147053fac23cf51f1a519e13de319a288b3139e2fb.exe windows x86
e797c48023314b25d7b5c96d8759185d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
MoveFileA
DeleteFileA
GetModuleFileNameA
GetCommandLineA
Sleep
GetLocalTime
MultiByteToWideChar
GetTickCount
GetCurrentThreadId
lstrcmpiA
lstrlenW
WideCharToMultiByte
RaiseException
FlushInstructionCache
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpA
MulDiv
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
DeleteCriticalSection
SetEvent
InterlockedDecrement
InitializeCriticalSection
CreateThread
ReadFile
SetEndOfFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetFilePointer
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
HeapSize
GetStdHandle
WriteFile
HeapCreate
ExitProcess
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualProtect
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
GetTempPathA
CreateDirectoryA
RemoveDirectoryA
CreateMutexA
ExpandEnvironmentStringsA
lstrcpyA
lstrcatA
lstrlenA
GetFileAttributesExA
GetCurrentProcess
GetModuleHandleA
DuplicateHandle
GetExitCodeProcess
GetProcAddress
CreateRemoteThread
GetLastError
WaitForSingleObject
CloseHandle
SetLastError
UnhandledExceptionFilter
TerminateProcess
ResumeThread
ExitThread
RtlUnwind
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
user32
SetWindowPos
SetWindowLongA
MessageBoxA
wsprintfA
LoadBitmapA
FillRect
IsWindowVisible
ClientToScreen
PeekMessageA
TranslateMessage
SetLayeredWindowAttributes
DispatchMessageA
FindWindowA
MoveWindow
IsWindow
GetWindowRect
GetFocus
WindowFromPoint
GetForegroundWindow
GetCursorPos
AttachThreadInput
GetWindowThreadProcessId
FindWindowExA
DefWindowProcA
BringWindowToTop
InvalidateRgn
PostThreadMessageA
DestroyWindow
GetDlgItem
UnregisterClassA
InvalidateRect
SetCapture
ReleaseCapture
ScreenToClient
CreateAcceleratorTableA
GetDC
ReleaseDC
GetDesktopWindow
CharNextA
GetParent
GetClassNameA
RedrawWindow
IsChild
SetFocus
GetWindow
GetSysColor
DestroyAcceleratorTable
SendMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
EndPaint
BeginPaint
GetClientRect
GetWindowLongA
CallWindowProcA
CreateWindowExA
ShowWindow
gdi32
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
GetStockObject
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetObjectA
GetDeviceCaps
advapi32
RegDeleteValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
shell32
ShellExecuteA
ole32
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleInitialize
CreateStreamOnHGlobal
OleUninitialize
CoInitializeEx
OleLockRunning
CoUninitialize
CoInitialize
oleaut32
VariantClear
VariantInit
SysFreeString
DispCallFunc
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysAllocString
SysAllocStringLen
OleCreateFontIndirect
shlwapi
PathFindFileNameA
PathGetArgsA
StrStrIW
StrToIntA
UrlUnescapeA
PathFileExistsA
PathIsDirectoryA
PathRemoveFileSpecA
PathRemoveBlanksA
ws2_32
socket
recv
send
closesocket
__WSAFDIsSet
select
connect
ioctlsocket
htons
gethostbyname
WSAStartup
netapi32
Netbios
psapi
GetModuleFileNameExA
EnumProcesses
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ