Static task
static1
Behavioral task
behavioral1
Sample
5c6793c64b42158a6c02f160429420936394d5532d1efb92762fc88fa48ac55b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c6793c64b42158a6c02f160429420936394d5532d1efb92762fc88fa48ac55b.exe
Resource
win10v2004-20220812-en
General
-
Target
5c6793c64b42158a6c02f160429420936394d5532d1efb92762fc88fa48ac55b
-
Size
404KB
-
MD5
0cec50d0505209ab908eccb44e6388a2
-
SHA1
9bde9e292df50ac38d6395f9423173b46dd69352
-
SHA256
5c6793c64b42158a6c02f160429420936394d5532d1efb92762fc88fa48ac55b
-
SHA512
e7e0b553dafcdf039c44b4c1a44715542f70b812d2f6c6cd378cc48a5e6d8e8ba54698ae13a87d5700c9c30033eba357f946032e8b32317200c13c5b68127aa1
-
SSDEEP
12288:VGT/rVmRhRYgEg11egJ2QQ9KJzcvwVdyTK7ueGD:V0/sRhRYlg11egJ2QQ9ANl8
Malware Config
Signatures
Files
-
5c6793c64b42158a6c02f160429420936394d5532d1efb92762fc88fa48ac55b.exe windows x86
9673462481ddaf543ce4e4d25023ac42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndMenu
TranslateMessage
RegisterClassExA
DdeSetQualityOfService
EndDeferWindowPos
OpenIcon
IsClipboardFormatAvailable
GetDlgItemInt
DrawMenuBar
EnumDisplaySettingsExA
CallMsgFilter
PostMessageA
DefWindowProcW
GetPriorityClipboardFormat
RegisterWindowMessageW
GetWindowRect
MapVirtualKeyW
GetSystemMetrics
MessageBoxW
WindowFromPoint
DdeQueryNextServer
ShowWindow
EmptyClipboard
TrackMouseEvent
DdeUnaccessData
RegisterClassA
DlgDirListW
GetCursor
EndDialog
SetMenu
InvertRect
CreateWindowExW
BroadcastSystemMessageA
PeekMessageA
DdeInitializeW
GetFocus
CreateDesktopA
GetWindowInfo
DrawFrameControl
GetKeyState
SetWindowPlacement
DestroyAcceleratorTable
DestroyWindow
BeginPaint
DdeInitializeA
GetMenuItemInfoW
BeginDeferWindowPos
UnregisterClassW
AnyPopup
FindWindowA
CallWindowProcA
GetComboBoxInfo
GetOpenClipboardWindow
PostQuitMessage
RedrawWindow
comctl32
DrawInsert
CreateToolbarEx
ImageList_Create
GetEffectiveClientRect
InitCommonControlsEx
ImageList_Replace
DrawStatusTextW
DrawStatusTextA
kernel32
GetUserDefaultLCID
MultiByteToWideChar
SetEnvironmentVariableA
SetLastError
LCMapStringW
InitializeCriticalSection
EnumDateFormatsW
GetSystemInfo
GetPrivateProfileSectionNamesA
lstrcmpiW
GetThreadSelectorEntry
IsValidCodePage
SetHandleCount
HeapAlloc
IsValidLocale
GetCurrentProcessId
GetDateFormatA
GetTimeZoneInformation
Sleep
CreateMutexA
TlsSetValue
FreeLibraryAndExitThread
VirtualFree
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetStartupInfoA
CloseHandle
OpenMutexA
EnumSystemLocalesA
WideCharToMultiByte
CompareStringW
InterlockedExchange
FreeEnvironmentStringsW
RtlUnwind
SetWaitableTimer
TlsGetValue
HeapReAlloc
LocalAlloc
SetFilePointer
GetVersionExA
VirtualQuery
LeaveCriticalSection
GetOEMCP
VirtualProtect
CreateFileW
WriteFile
TlsAlloc
GetCurrentThreadId
GetStartupInfoW
CreateDirectoryExA
CreateRemoteThread
GetTimeFormatA
lstrcatW
lstrcmpA
GetFileType
SetStdHandle
HeapFree
HeapSize
QueryPerformanceCounter
GetStringTypeW
ReadFile
GetModuleFileNameA
FlushFileBuffers
IsBadWritePtr
HeapDestroy
GetSystemTimeAsFileTime
EnterCriticalSection
HeapCreate
GetCurrentProcess
LockFileEx
GetPrivateProfileIntW
GlobalCompact
GetACP
VirtualAlloc
CompareStringA
LoadLibraryA
GetCurrentThread
GetLocaleInfoW
GetTickCount
GetCommandLineA
LCMapStringA
FreeEnvironmentStringsA
GetStringTypeA
lstrlenW
GetLastError
GetStdHandle
GetLocaleInfoA
GetProcAddress
TlsFree
GetEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
GetModuleHandleA
DeleteCriticalSection
advapi32
CryptVerifySignatureW
LookupPrivilegeDisplayNameA
RegOpenKeyExW
CryptHashData
CryptImportKey
CryptSetProvParam
RegConnectRegistryW
LookupPrivilegeDisplayNameW
RegRestoreKeyA
CryptSignHashW
LogonUserA
CryptEnumProvidersW
shell32
SHBrowseForFolder
SHGetMalloc
DragQueryFileAorW
comdlg32
LoadAlterBitmap
GetSaveFileNameA
ReplaceTextW
FindTextW
gdi32
Arc
Chord
SetPixel
DeleteDC
CreateDCW
CreateEllipticRgnIndirect
GetEnhMetaFilePaletteEntries
CopyMetaFileA
StartDocA
FillPath
SetMetaFileBitsEx
FlattenPath
UnrealizeObject
GetEnhMetaFileA
GetTextCharacterExtra
GetCurrentObject
SetBoundsRect
StrokePath
GetDeviceCaps
MoveToEx
GetCurrentPositionEx
GetICMProfileA
GetDIBColorTable
SelectObject
GetObjectW
GetMetaFileA
EqualRgn
Sections
.text Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ