Static task
static1
Behavioral task
behavioral1
Sample
1ad8809347eeb6fd7cd6350229a5ed9dc4b5ca97c49671188c7c86c7e1c03dcb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ad8809347eeb6fd7cd6350229a5ed9dc4b5ca97c49671188c7c86c7e1c03dcb.exe
Resource
win10v2004-20220812-en
General
-
Target
1ad8809347eeb6fd7cd6350229a5ed9dc4b5ca97c49671188c7c86c7e1c03dcb
-
Size
740KB
-
MD5
54aa282bbc67aac4d462ddc76096c106
-
SHA1
4cb55cdd8099ecb6cd697838ca72506bf23cac2e
-
SHA256
1ad8809347eeb6fd7cd6350229a5ed9dc4b5ca97c49671188c7c86c7e1c03dcb
-
SHA512
4fc9fbc55eafbc171748e2b91751091a0b644ae9ea8f4714affd8af1e1047504b80543d981c449748ec850c6175d6a3c9be3cca75b1b9264dcff012972993ead
-
SSDEEP
12288:5TbEblEqvPedr2DQFN7DE9auJF+3nuBAqyvK5YISC048KZj/C6Zc492g8MhD9I7S:94blESedCDqlESxzKc4PHhD94tEMBU
Malware Config
Signatures
Files
-
1ad8809347eeb6fd7cd6350229a5ed9dc4b5ca97c49671188c7c86c7e1c03dcb.exe windows x86
55c85abe0934f6ca87f4de210392cc8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
RaiseException
FreeEnvironmentStringsW
FlushFileBuffers
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetFileAttributesA
CompareStringW
GetStdHandle
SetEnvironmentVariableA
GetACP
SetStdHandle
HeapSize
HeapReAlloc
HeapAlloc
RtlUnwind
GetVersion
GetCommandLineA
GetStartupInfoA
DeleteFileA
MoveFileA
GetLocalTime
TerminateProcess
MulDiv
GetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCPInfo
GetStringTypeW
GetOEMCP
GetStringTypeA
IsBadCodePtr
SetUnhandledExceptionFilter
IsBadReadPtr
SetEndOfFile
LCMapStringA
LCMapStringW
SetFilePointer
CompareStringA
ReadFile
HeapDestroy
GetFileType
SetHandleCount
MultiByteToWideChar
ExitProcess
HeapFree
GetCurrentProcess
WideCharToMultiByte
LoadLibraryA
GetProcAddress
GetModuleHandleA
WriteFile
GetLastError
CreateFileA
GetVersionExA
CloseHandle
IsProcessorFeaturePresent
GetTimeZoneInformation
GetSystemTime
user32
TranslateMessage
DispatchMessageA
TranslateAcceleratorA
GetWindowRect
ClientToScreen
GetClientRect
SetDlgItemTextA
EndDialog
ShowWindow
EnableWindow
GetDlgItem
GetDlgItemTextA
PostMessageA
DefWindowProcA
DestroyCursor
LoadCursorFromFileA
LoadCursorA
DrawMenuBar
RedrawWindow
GetSystemMetrics
PeekMessageA
SendDlgItemMessageA
WaitMessage
CreateWindowExA
PostQuitMessage
DialogBoxParamA
LoadIconA
RegisterClassA
UpdateWindow
LoadAcceleratorsA
SetCursor
GetForegroundWindow
MessageBoxA
winmm
timeGetTime
waveOutSetVolume
auxSetVolume
mciSendStringA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
advapi32
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
gdi32
SetMapMode
GetDeviceCaps
CreateDIBSection
SelectObject
SetTextColor
CreateFontA
SetTextAlign
GetTextExtentPoint32A
SetBkColor
DeleteObject
DeleteDC
ExtTextOutA
GetStockObject
CreateCompatibleDC
shell32
ShellExecuteA
d3d8
Direct3DCreate8
dsound
ord11
Sections
.text Size: 508KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
D]���u� Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE