Static task
static1
Behavioral task
behavioral1
Sample
1f5e4ba48e1d23d46daaed4507e435e78ad6c159987f6689e90ef5ca2a9c6dd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f5e4ba48e1d23d46daaed4507e435e78ad6c159987f6689e90ef5ca2a9c6dd9.exe
Resource
win10v2004-20220901-en
General
-
Target
1f5e4ba48e1d23d46daaed4507e435e78ad6c159987f6689e90ef5ca2a9c6dd9
-
Size
83KB
-
MD5
0a594d62d1e14a5e8180da2871033488
-
SHA1
3c13ca075c5e45ff330d8c5dac06f4507667a3b8
-
SHA256
1f5e4ba48e1d23d46daaed4507e435e78ad6c159987f6689e90ef5ca2a9c6dd9
-
SHA512
f83a4bd42ae419b24b78f159172861d440a21adfd046b6c9605cdc06917655693453a66c6fcf457110b4af7a0b3e46d3a21caa5c1519c9f96f1ac41d464b9d3d
-
SSDEEP
1536:YzSA7idv6dmDSayI6XY3Fob/AMRU/oa7qIb2vVhx82jCGCc17uQareamc:SSYi4fayEF81HSDbEnBmY8hlmc
Malware Config
Signatures
Files
-
1f5e4ba48e1d23d46daaed4507e435e78ad6c159987f6689e90ef5ca2a9c6dd9.exe windows x86
5afe6680aebdf257612092fbe7afb80a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
PatBlt
ExtTextOutW
GetDeviceCaps
SetTextColor
DeleteObject
BitBlt
SetBkMode
SelectObject
CreateCompatibleDC
SetBkColor
CreateDIBitmap
IntersectClipRect
CreateSolidBrush
GetTextExtentPointW
avifil32
AVIFileOpenA
user32
GetSysColor
GetSystemMetrics
IntersectRect
OffsetRect
InflateRect
GetWindowLongW
DefDlgProcW
UnhookWindowsHookEx
CharPrevW
IsWindowEnabled
ShowCaret
IsIconic
DefWindowProcW
ClientToScreen
GetWindowTextLengthW
IsWindowUnicode
ScreenToClient
DrawFocusRect
MessageBoxA
SetWindowLongW
GetFocus
RemovePropW
HideCaret
CallWindowProcW
GetPropW
ExcludeUpdateRgn
SendMessageW
GetWindow
GetParent
CallNextHookEx
GetClassInfoW
SetPropW
GetWindowRect
InvalidateRect
DrawTextW
GetClientRect
ValidateRect
GetClassNameW
SetWindowLongA
GetWindowDC
GetDC
BeginPaint
GetWindowTextW
MapWindowPoints
EndPaint
SetWindowsHookExW
CharNextW
ReleaseDC
kernel32
SizeofResource
GetModuleFileNameW
InitializeCriticalSection
EnterCriticalSection
GetWindowsDirectoryW
GetEnvironmentVariableW
GetProcAddress
FindResourceW
GetProfileStringW
lstrcmpiW
GetCurrentThreadId
GlobalAlloc
GlobalAddAtomW
GetModuleHandleA
LoadResource
VirtualAlloc
GlobalFree
GetVersion
GlobalDeleteAtom
lstrlenW
lstrcmpW
GetSystemDirectoryW
Sections
.textbss Size: - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cxeidrk Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE