Static task
static1
Behavioral task
behavioral1
Sample
5cc01e8e27422c29e8c1946b3164a81e6b78b7c768dccecfaa47ca0462737700.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5cc01e8e27422c29e8c1946b3164a81e6b78b7c768dccecfaa47ca0462737700.exe
Resource
win10v2004-20220901-en
General
-
Target
5cc01e8e27422c29e8c1946b3164a81e6b78b7c768dccecfaa47ca0462737700
-
Size
548KB
-
MD5
a3e8e23a30e032f25cf5a3aff77ead49
-
SHA1
a91979fda8325b1e987f882cb7b868bc3918d591
-
SHA256
5cc01e8e27422c29e8c1946b3164a81e6b78b7c768dccecfaa47ca0462737700
-
SHA512
9a8c543bede65b77cda937668f9542b717101468dc9d5684be4b7ca14e592144ba9d08728341cc43806858e8cb491f623db473089f8646a2f9d57ef2d9e5964f
-
SSDEEP
12288:bX76jXnZB1vPnXOdbCOPvnpBs2fNAoxvfm7AZJYOY0E:z7MfFPnXYbDPvpBs2GoxXmUZJzY0
Malware Config
Signatures
Files
-
5cc01e8e27422c29e8c1946b3164a81e6b78b7c768dccecfaa47ca0462737700.exe windows x86
4b3aaeb5707ae2162507af6d7633a546
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueA
CryptSetProviderExW
RegNotifyChangeKeyValue
CryptImportKey
RegEnumKeyA
RegSetValueW
CryptGenKey
RegQueryInfoKeyW
RegQueryValueW
CryptHashData
RegQueryMultipleValuesW
RegEnumKeyExA
user32
RegisterClassA
FlashWindowEx
LoadStringA
MessageBoxIndirectW
GetScrollBarInfo
EmptyClipboard
DlgDirSelectExW
GetClipboardViewer
NotifyWinEvent
RegisterClassExA
DrawFocusRect
wininet
InternetSetDialState
GopherCreateLocatorW
InternetAlgIdToStringW
IncrementUrlCacheHeaderData
InternetInitializeAutoProxyDll
InternetConfirmZoneCrossingW
InternetSecurityProtocolToStringW
comctl32
ImageList_LoadImage
DrawStatusText
ImageList_Remove
ImageList_SetFilter
CreatePropertySheetPageW
ImageList_DrawIndirect
GetEffectiveClientRect
ImageList_Replace
ImageList_AddMasked
ImageList_LoadImageW
ImageList_SetImageCount
CreateUpDownControl
InitCommonControlsEx
ImageList_SetDragCursorImage
CreatePropertySheetPageA
CreatePropertySheetPage
CreateToolbarEx
ImageList_DragEnter
ImageList_SetBkColor
kernel32
TlsFree
GetCurrentProcessId
GetACP
TlsSetValue
InterlockedIncrement
GetEnvironmentStrings
CompareStringA
GetDateFormatA
FreeLibrary
FreeEnvironmentStringsA
IsDebuggerPresent
GetModuleFileNameW
SetLocalTime
IsValidCodePage
SetEnvironmentVariableA
SetUnhandledExceptionFilter
UnlockFile
CompareFileTime
GetStartupInfoW
GetConsoleMode
HeapDestroy
GetConsoleOutputCP
IsValidLocale
GetTimeFormatA
FreeEnvironmentStringsW
Sleep
SetFilePointer
HeapReAlloc
GetCommandLineA
CloseHandle
GetStringTypeA
SetHandleCount
GetStartupInfoA
ExitProcess
TlsGetValue
GetLastError
GetCurrentThreadId
GetTimeZoneInformation
GetStringTypeW
SetLastError
SetConsoleCtrlHandler
GetCPInfo
CompareStringW
EnterCriticalSection
DeleteCriticalSection
GetCurrentThread
GetStdHandle
GetCommandLineW
GetUserDefaultLCID
VirtualQuery
CreateMutexA
EnumSystemLocalesA
WriteConsoleA
InterlockedExchange
TlsAlloc
CreateFileA
LCMapStringW
GetEnvironmentStringsW
LeaveCriticalSection
WideCharToMultiByte
SetStdHandle
QueryPerformanceCounter
WriteConsoleW
HeapAlloc
GetSystemTimeAsFileTime
GetProcessHeap
VirtualAlloc
OpenMutexA
GetVersionExA
VirtualFree
GetFileType
TerminateProcess
FillConsoleOutputAttribute
ReadFile
GetCurrentProcess
GetTickCount
GetOEMCP
FlushFileBuffers
GetLocaleInfoW
GetPrivateProfileStringW
LCMapStringA
FillConsoleOutputCharacterA
GetLocaleInfoA
LoadLibraryA
GetModuleHandleA
HeapSize
HeapCreate
InitializeCriticalSection
WriteFile
RtlUnwind
MultiByteToWideChar
GetProcAddress
FlushConsoleInputBuffer
HeapFree
InterlockedDecrement
GetModuleFileNameA
UnhandledExceptionFilter
GetConsoleCP
FindResourceW
gdi32
Pie
GetCharWidthA
SetColorSpace
CreateEllipticRgnIndirect
CreateDCW
RestoreDC
ExtCreateRegion
DeleteDC
GetObjectA
CloseEnhMetaFile
CreateICW
CreateDCA
EnumMetaFile
SetBrushOrgEx
CreateEnhMetaFileW
GetDIBColorTable
GetNearestColor
DeleteObject
GetDeviceCaps
SelectObject
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 246KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ