Static task
static1
Behavioral task
behavioral1
Sample
59bca550d17e33dc78851c200cddb05302469f6ff9b48ef0b28c723798ef4a0b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
59bca550d17e33dc78851c200cddb05302469f6ff9b48ef0b28c723798ef4a0b.exe
Resource
win10v2004-20220812-en
General
-
Target
59bca550d17e33dc78851c200cddb05302469f6ff9b48ef0b28c723798ef4a0b
-
Size
252KB
-
MD5
0859297e02ce2a71a3ee494dd9fba27b
-
SHA1
42260ef63f6f9bea311cb4ecb14f6c27f25c7fa4
-
SHA256
59bca550d17e33dc78851c200cddb05302469f6ff9b48ef0b28c723798ef4a0b
-
SHA512
bbf2c2dc5c84a0b6bc09ac87ae70e7c672f3af91698892d5e108920a740787b5d98f7d9247884d242adc81339cebbeda1f0d96e716853b8e31027bce512cad56
-
SSDEEP
6144:XBdixxzqFvPx7bDM4o9W1ZC3vieFNKbbSouUe:xknqn7M1WSffFNMbPuU
Malware Config
Signatures
Files
-
59bca550d17e33dc78851c200cddb05302469f6ff9b48ef0b28c723798ef4a0b.exe windows x86
d7b418230a59bf6bdf7caa7aae75856d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
WideCharToMultiByte
GetSystemTimeAsFileTime
MultiByteToWideChar
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
GetStartupInfoA
GetFileType
SetHandleCount
GetOEMCP
GetCPInfo
GetStdHandle
ExitProcess
Sleep
TlsFree
TlsSetValue
TlsAlloc
DeleteCriticalSection
GetModuleHandleA
HeapCreate
OutputDebugStringW
GetTimeZoneInformation
GetLocalTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
GetVersionExA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetStringTypeA
FlushFileBuffers
SetFilePointer
GetLastError
CreateDirectoryW
GetStringTypeW
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetConsoleMode
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetModuleFileNameW
GetCommandLineW
GetModuleFileNameA
CreateFileW
WriteFile
CloseHandle
GetACP
GetVersionExW
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
SetLastError
GetCurrentProcess
GetStartupInfoW
FlushInstructionCache
GetConsoleCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsGetValue
GetCurrentProcessId
user32
UnregisterClassA
wsprintfW
GetGUIThreadInfo
ScreenToClient
GetScrollPos
WindowFromPoint
EnumChildWindows
IsWindow
GetActiveWindow
GetDlgCtrlID
InvalidateRect
CallWindowProcW
EndDialog
GetCursorPos
TrackPopupMenu
DialogBoxParamW
PostQuitMessage
IsWindowVisible
IsIconic
SetForegroundWindow
PostMessageW
DestroyIcon
GetSystemMetrics
LoadImageW
LoadStringW
LoadMenuW
GetWindow
GetWindowRect
SystemParametersInfoW
GetClientRect
MapWindowPoints
SetWindowPos
IsDialogMessageW
MessageBoxW
GetDlgItem
KillTimer
SetTimer
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
GetWindowLongW
CreateWindowExW
MonitorFromPoint
GetMonitorInfoW
DestroyMenu
AppendMenuW
CreatePopupMenu
SendMessageW
GetParent
UnregisterHotKey
RegisterHotKey
RegisterWindowMessageW
DefWindowProcW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CreateDialogParamW
ShowWindow
SetWindowLongW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
Shell_NotifyIconW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
atl80
ord61
ord44
ord64
ord23
ord43
shlwapi
PathFileExistsW
comctl32
InitCommonControlsEx
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ