Static task
static1
Behavioral task
behavioral1
Sample
005fc22e7bfcd7eb7c2d2c2e3c824a48a538c715b54d75c888b689278add8352.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
005fc22e7bfcd7eb7c2d2c2e3c824a48a538c715b54d75c888b689278add8352.exe
Resource
win10v2004-20220812-en
General
-
Target
005fc22e7bfcd7eb7c2d2c2e3c824a48a538c715b54d75c888b689278add8352
-
Size
351KB
-
MD5
a29237ab0a733f24d01b9ccc6fb8b3b0
-
SHA1
e9104e1701a5b3c058f3e9ceb63c28a5b91f1050
-
SHA256
005fc22e7bfcd7eb7c2d2c2e3c824a48a538c715b54d75c888b689278add8352
-
SHA512
6c4907f3dbebfb6ecde31cb8791f0a91851bf824b2fea28f9a344a4bbf45450ce166210daeeaf47709591261e6dac3657564de408738c2de04c04a2dc669b572
-
SSDEEP
6144:yNAUtJN0J7JM4RyqtElodPrTgIkw/mjBQnfyFRO+F59rOGhgjFSyYsMAX:IAUtJN0NryqCodPrTUndaM1LyGhgRv
Malware Config
Signatures
Files
-
005fc22e7bfcd7eb7c2d2c2e3c824a48a538c715b54d75c888b689278add8352.exe windows x86
60dbfe017f1250066becd4973937f0f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
SetLastError
HeapSize
WriteConsoleW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
HeapReAlloc
LoadLibraryW
GetConsoleMode
GetConsoleCP
SetFilePointer
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetLastError
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
AllocConsole
GetStdHandle
HeapCreate
GetNativeSystemInfo
HeapAlloc
FindResourceExA
LoadResource
SizeofResource
LockResource
WriteFile
Sleep
DeleteCriticalSection
SetHandleCount
GetModuleFileNameW
ExitProcess
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
GetCurrentProcess
CreateFileW
TerminateProcess
WaitForSingleObject
CloseHandle
GetModuleHandleA
GetCurrentProcessId
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
user32
EnumDesktopsA
GetDC
DestroyWindow
UpdateWindow
GetKeyboardLayout
GetSystemMetrics
ReleaseDC
PostThreadMessageA
EndDialog
DrawTextA
GetSysColor
GetMenuCheckMarkDimensions
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetDialogBaseUnits
GetWindowLongA
MessageBoxA
CreateWindowExA
GetWindowTextA
SetWindowTextA
IsMenu
GetClientRect
MoveWindow
ShowWindow
LoadCursorA
GetMenu
GetSubMenu
CheckMenuItem
SendMessageA
PostQuitMessage
DefWindowProcA
GetDlgItem
GetForegroundWindow
SetFocus
gdi32
SetBkColor
CreatePen
CreateSolidBrush
DeleteObject
RestoreDC
SetTextColor
Rectangle
SelectObject
SetBkMode
ole32
CoLockObjectExternal
CoSuspendClassObjects
oleaut32
RegisterActiveObject
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
shlwapi
StrToIntExA
gdiplus
GdipGetImageEncodersSize
imm32
ImmGetOpenStatus
ImmGetConversionStatus
ImmReleaseContext
ImmGetContext
setupapi
SetupCreateDiskSpaceListA
uxtheme
IsAppThemed
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ