Static task
static1
Behavioral task
behavioral1
Sample
d50fbede4612de2396c7be0bf7dc9ace199e4231057c849109b45d68f77f43ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d50fbede4612de2396c7be0bf7dc9ace199e4231057c849109b45d68f77f43ca.exe
Resource
win10v2004-20220812-en
General
-
Target
d50fbede4612de2396c7be0bf7dc9ace199e4231057c849109b45d68f77f43ca
-
Size
636KB
-
MD5
7c6e5267fd371d759ff42125bd3abb5e
-
SHA1
182d4ebef8cd5101e709e6a82a4042b4dc8aeb20
-
SHA256
d50fbede4612de2396c7be0bf7dc9ace199e4231057c849109b45d68f77f43ca
-
SHA512
3ca2d4306a3174706ea9133bc923cf830ed5b6be85bd1663d505dff8594a891e46c76e41397e6d6a972a80c9361fb80fc96058d85f3dfdfef5047fdde9b806af
-
SSDEEP
12288:5bzbrZaTZuwEtD7ARhC7IKDgJUqpyiIaAW3S+ZqlizYoJ048m88:5/uZu/AfEpofyi82SNHp4Vd
Malware Config
Signatures
Files
-
d50fbede4612de2396c7be0bf7dc9ace199e4231057c849109b45d68f77f43ca.exe windows x86
5c5ae43d927d9ed2ee4992bc5c98d89d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Replace
InitCommonControlsEx
ImageList_Write
ImageList_LoadImage
ImageList_SetImageCount
ImageList_Draw
ImageList_Destroy
ImageList_GetImageCount
ImageList_SetFlags
_TrackMouseEvent
ImageList_GetImageRect
ImageList_Create
ImageList_SetOverlayImage
CreateMappedBitmap
ImageList_Copy
ImageList_DrawIndirect
DrawStatusTextW
CreateStatusWindowW
advapi32
LookupPrivilegeNameW
RegOpenKeyExA
CryptCreateHash
RegSetKeySecurity
RegQueryValueA
RegCloseKey
CryptDestroyKey
RegDeleteValueA
LookupPrivilegeDisplayNameW
CreateServiceA
LookupPrivilegeValueW
RegQueryInfoKeyA
kernel32
SetLocaleInfoA
GetSystemTimeAsFileTime
lstrlen
TlsSetValue
GetFileAttributesA
HeapSize
GlobalFree
FillConsoleOutputAttribute
CreateEventA
HeapCreate
FileTimeToDosDateTime
GetCurrentProcessId
InterlockedIncrement
SetConsoleCtrlHandler
GetCommandLineA
GetFileType
GetLocalTime
FindFirstFileExW
SetEnvironmentVariableA
GetProcessHeap
HeapFree
HeapReAlloc
LeaveCriticalSection
FoldStringW
InterlockedDecrement
GetEnvironmentStringsW
InitializeCriticalSection
TlsFree
GetStartupInfoW
FreeEnvironmentStringsA
LCMapStringA
GetCurrentProcess
lstrcpynW
Sleep
GetSystemDefaultLCID
TlsGetValue
WideCharToMultiByte
LCMapStringW
CloseHandle
SetConsoleTextAttribute
GetStdHandle
SetStdHandle
GetUserDefaultLCID
GetTickCount
TerminateThread
VirtualQueryEx
CompareStringW
MapViewOfFile
FreeEnvironmentStringsW
SetHandleCount
SetLastError
TlsAlloc
WriteConsoleW
FlushFileBuffers
GetVersionExA
RtlUnwind
CreateNamedPipeW
QueryPerformanceCounter
GetDateFormatA
GetTimeZoneInformation
GetCurrentThread
GetVolumeInformationW
FreeLibrary
GetModuleHandleA
GetCommandLineW
HeapAlloc
lstrlenA
WritePrivateProfileStringA
GetModuleFileNameW
GetConsoleOutputCP
HeapDestroy
IsValidCodePage
GetLastError
SetUnhandledExceptionFilter
GetLocaleInfoA
EnumSystemLocalesA
GetACP
EnterCriticalSection
CreateNamedPipeA
GlobalAlloc
GetCurrentThreadId
MultiByteToWideChar
CreateMutexA
OpenMutexA
GetEnvironmentStrings
GetCPInfo
DeleteCriticalSection
OpenSemaphoreA
GetLogicalDriveStringsW
GetLocaleInfoW
IsDebuggerPresent
RtlZeroMemory
GetProcAddress
VirtualFree
GlobalAddAtomW
ExitProcess
ResetEvent
CompareStringA
VirtualAlloc
GetExitCodeThread
VirtualQuery
WriteProfileSectionA
InterlockedExchange
WriteConsoleA
GetModuleFileNameA
CreateProcessA
LoadLibraryA
SetFilePointer
GetConsoleMode
CompareFileTime
CreateFileA
TerminateProcess
GetStartupInfoA
ReadFile
GetStringTypeA
CreateSemaphoreW
IsValidLocale
OpenFileMappingW
GetTimeFormatA
GetConsoleCP
UnhandledExceptionFilter
WriteFile
GetCurrencyFormatW
GetOEMCP
SetLocalTime
GetStringTypeW
user32
TranslateMessage
ShowWindow
RegisterClassExA
TranslateAcceleratorA
RegisterHotKey
MessageBoxA
EnumWindowStationsW
SetWindowTextA
DefWindowProcA
ReleaseCapture
SetClassLongW
GetPropW
CreateCursor
GetClipboardOwner
GetCapture
GetAltTabInfo
CharUpperA
SetUserObjectInformationW
GetMenuInfo
CreateWindowExA
DeleteMenu
IsCharLowerA
DestroyWindow
MenuItemFromPoint
SetClassLongA
RegisterClassA
EndTask
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ