Static task
static1
Behavioral task
behavioral1
Sample
a5f474301659510a6ea2947a65bf350a9876d47b138ef9e66c12b13dd0a5b6b6.exe
Resource
win7-20220812-en
General
-
Target
a5f474301659510a6ea2947a65bf350a9876d47b138ef9e66c12b13dd0a5b6b6
-
Size
269KB
-
MD5
a13bf0f5ca473f737a67952c6826a660
-
SHA1
3e8b36bb7566506f9e6c92b2c85ef4dee7a6b953
-
SHA256
a5f474301659510a6ea2947a65bf350a9876d47b138ef9e66c12b13dd0a5b6b6
-
SHA512
3bfd09f2a11805ab5ef19eeeccd0ad9325bb6e83f6f3276f9ba453b4fbbf334a19fcb0ef4594da04791c822833f62c5672d62194955c3d5c7b549ba0342d299f
-
SSDEEP
6144:iO6Gc3yKHUug5ADHYNHdo3EX38jGyyVaCnHYeNFpeOFC:iOGr9jSHdnX38jnin4e5eOo
Malware Config
Signatures
Files
-
a5f474301659510a6ea2947a65bf350a9876d47b138ef9e66c12b13dd0a5b6b6.exe windows x86
6932beaac6362f4332911c2a4479a514
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsSystemResumeAutomatic
CompareStringW
GetLocalTime
LeaveCriticalSection
RaiseException
GetNumberFormatW
GetWriteWatch
FindResourceA
GetStringTypeA
DefineDosDeviceA
FindFirstVolumeMountPointA
CommConfigDialogW
IsProcessorFeaturePresent
lstrcatW
lstrcatA
QueueUserWorkItem
_lwrite
SetProcessAffinityMask
BackupRead
SystemTimeToTzSpecificLocalTime
Sleep
WaitCommEvent
FoldStringW
GetVolumeNameForVolumeMountPointA
EnumResourceLanguagesW
OutputDebugStringA
ConvertDefaultLocale
lstrcmpA
CreateHardLinkA
PostQueuedCompletionStatus
GetVolumeNameForVolumeMountPointW
GetProfileStringW
GetTempFileNameA
CreateDirectoryA
WritePrivateProfileStringW
GetCalendarInfoA
SearchPathA
WaitForSingleObjectEx
FileTimeToLocalFileTime
GetStringTypeW
EnterCriticalSection
InitializeCriticalSection
FreeEnvironmentStringsA
ExitProcess
GetExitCodeProcess
CreateMutexW
InterlockedExchangeAdd
CreateMailslotW
InterlockedDecrement
user32
GetMessageTime
GetWindow
SetWindowPos
OpenDesktopW
IsWindowEnabled
GetMenu
GetSysColorBrush
MessageBoxIndirectA
FrameRect
GetThreadDesktop
DdeFreeDataHandle
GetIconInfo
SetCursor
GetDlgItemTextA
EnumDisplayMonitors
SetMenuItemBitmaps
IsDialogMessageW
TrackMouseEvent
DdeConnect
SetPropW
CharUpperBuffW
WaitForInputIdle
DlgDirListW
DestroyIcon
CopyIcon
GetClientRect
DdeAbandonTransaction
DdeNameService
SendIMEMessageExA
SetSystemCursor
DialogBoxIndirectParamW
GetProcessWindowStation
CharPrevA
UnionRect
GetUserObjectInformationW
GetUserObjectInformationA
SetDeskWallpaper
DispatchMessageW
GetWindowModuleFileNameA
FindWindowW
DdeUnaccessData
RegisterWindowMessageW
LoadBitmapW
IsClipboardFormatAvailable
MessageBoxA
ChangeClipboardChain
DeregisterShellHookWindow
CharPrevW
IMPSetIMEA
GetQueueStatus
ExitWindowsEx
AdjustWindowRect
LoadCursorA
PostMessageA
SwapMouseButton
OemToCharA
GetKeyboardLayoutList
OemToCharBuffA
DefDlgProcW
CreateIconIndirect
UpdateWindow
SendMessageW
LoadAcceleratorsW
GetPropW
GetClassInfoExW
GetWindowRgn
MonitorFromPoint
RedrawWindow
BroadcastSystemMessageW
ChangeMenuW
GetNextDlgGroupItem
IsCharAlphaNumericW
GetKeyboardLayout
GetClassLongA
UnpackDDElParam
TrackPopupMenuEx
GetCaretBlinkTime
ReplyMessage
PostThreadMessageW
ShowCaret
GetMenuItemID
CharNextExA
GetDlgItemTextW
RegisterDeviceNotificationW
shell32
SHGetSettings
SHGetFolderLocation
SHGetIconOverlayIndexA
SheChangeDirExW
ExtractIconW
InternalExtractIconListW
winspool.drv
AddPrintProcessorA
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE