Static task
static1
Behavioral task
behavioral1
Sample
19de14e831dab6e1ef56a3c3b1e60ec2b9a0f5e3cb193b6275f7c7d36255b60c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
19de14e831dab6e1ef56a3c3b1e60ec2b9a0f5e3cb193b6275f7c7d36255b60c.exe
Resource
win10v2004-20220812-en
General
-
Target
19de14e831dab6e1ef56a3c3b1e60ec2b9a0f5e3cb193b6275f7c7d36255b60c
-
Size
294KB
-
MD5
11cc14bac3557c31fabd122bfbd19c30
-
SHA1
31e23f5543c63ee1b73e738d79816704a5f3e4ca
-
SHA256
19de14e831dab6e1ef56a3c3b1e60ec2b9a0f5e3cb193b6275f7c7d36255b60c
-
SHA512
1155f26fa66759ce4a70d5e9a8d8011fc9f27f8a1e669bd8e685ad91b9b64929ad1acb37fc5e783b2cf42635abdc461625f714eb81b88c06829b3a2113f7b51e
-
SSDEEP
6144:J7ocZT3dgyf89UzgCJDW0oZzHDUfB0nerwGcAIOLy3w8taX:J7oO3dgyf8S9BjWDe0MwFKLyptY
Malware Config
Signatures
Files
-
19de14e831dab6e1ef56a3c3b1e60ec2b9a0f5e3cb193b6275f7c7d36255b60c.exe windows x86
43f3c80ba882e4e32463f2cf5610498a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
WindowFromAccessibleObject
CreateStdAccessibleObject
GetStateTextW
AccessibleChildren
ObjectFromLresult
GetStateTextA
user32
GetWindowModuleFileNameA
GetPropW
GetDlgItemTextA
SetClassLongW
GetWindowLongA
CopyRect
SetWindowsHookW
CreateDesktopW
IsWindowVisible
DdeCreateStringHandleW
GetActiveWindow
LoadCursorA
GetScrollInfo
PaintDesktop
LoadMenuIndirectW
kernel32
lstrlenA
GetStartupInfoA
GetModuleHandleA
oleaut32
VarI2FromDisp
GetErrorInfo
GetRecordInfoFromGuids
VarCyCmp
LoadTypeLibEx
SafeArrayRedim
VarR8FromDec
VarDateFromUdate
VarUI1FromI4
VarBoolFromR8
VarUI1FromR8
VariantCopyInd
DispCallFunc
VarR4FromR8
VarDateFromUI4
gdi32
MaskBlt
shell32
SHGetFileInfoA
SHChangeNotify
DragAcceptFiles
ShellAboutA
SHGetPathFromIDListA
ord180
SHGetSettings
SHInvokePrinterCommandW
SHFreeNameMappings
Shell_NotifyIconA
Shell_NotifyIconW
msvcrt
__setusermatherr
_exit
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__commode
_adjust_fdiv
__p__fmode
_initterm
__getmainargs
_acmdln
exit
ole32
OleCreate
OleCreateLinkToFile
CoFreeUnusedLibraries
HMENU_UserUnmarshal
OleSetMenuDescriptor
CoRevokeClassObject
CoResumeClassObjects
GetConvertStg
CreateOleAdviseHolder
ReadClassStm
OleQueryCreateFromData
RevokeDragDrop
CreateItemMoniker
CoGetStandardMarshal
OleTranslateAccelerator
CoIsOle1Class
HPALETTE_UserSize
CreateDataAdviseHolder
CoLoadLibrary
STGMEDIUM_UserSize
HBITMAP_UserSize
CoReleaseMarshalData
CoCreateFreeThreadedMarshaler
OleDoAutoConvert
CoGetMarshalSizeMax
StgCreateStorageEx
OleGetIconOfClass
OleSetAutoConvert
CoRegisterSurrogate
OleQueryLinkFromData
OleMetafilePictFromIconAndLabel
CoGetObject
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ