Static task
static1
Behavioral task
behavioral1
Sample
5340533095431318d771ccc4c2b003817e3928ee5c3367fafde24b1253d851ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5340533095431318d771ccc4c2b003817e3928ee5c3367fafde24b1253d851ec.exe
Resource
win10v2004-20220812-en
General
-
Target
5340533095431318d771ccc4c2b003817e3928ee5c3367fafde24b1253d851ec
-
Size
225KB
-
MD5
217c93f78f50e554ed785390b93e9ff6
-
SHA1
8abc4a55943937dedf8ef536a4788b3c956308e3
-
SHA256
5340533095431318d771ccc4c2b003817e3928ee5c3367fafde24b1253d851ec
-
SHA512
c1127eceab33db305dde7898b8c3e268047aa0bdc7f12763677b28dd3916e48fe093213ee3da0a28cfcc66c531527ac6bcb8e38570c9f5d9f1b2d423315ba13a
-
SSDEEP
6144:zMfa7OV2XiWcW1TZgvo4r0srDYQpJQLwzYSgU2kA6:zSz2S5WHgQ4rxrDYsOFw
Malware Config
Signatures
Files
-
5340533095431318d771ccc4c2b003817e3928ee5c3367fafde24b1253d851ec.exe windows x86
f2d2a1c8e5e7a76a87a7d45f90c0b768
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
MulDiv
lstrcmpiA
OutputDebugStringA
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
VirtualAlloc
HeapFree
HeapReAlloc
HeapAlloc
SetStdHandle
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetLastError
SetFilePointer
DebugBreak
lstrcpyA
FreeEnvironmentStringsA
CloseHandle
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetACP
FlushFileBuffers
GetModuleHandleA
RaiseException
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAllocEx
SetTapeParameters
SetConsoleScreenBufferSize
LocalAlloc
OpenSemaphoreW
GetDriveTypeW
GetConsoleOutputCP
VDMOperationStarted
GetConsoleInputExeNameW
WriteConsoleA
GetFirmwareEnvironmentVariableW
CreateJobSet
DeleteTimerQueue
IsValidLocale
GlobalUnfix
GetSystemWindowsDirectoryW
QueryPerformanceCounter
RemoveLocalAlternateComputerNameW
EnumUILanguagesA
SetTermsrvAppInstallMode
FindClose
Thread32Next
EnumCalendarInfoA
Beep
GetNativeSystemInfo
GlobalMemoryStatusEx
MoveFileWithProgressW
FormatMessageA
TlsAlloc
CompareFileTime
GetNumaAvailableMemoryNode
PurgeComm
FlushInstructionCache
TryEnterCriticalSection
GetFileAttributesExA
ExitVDM
SystemTimeToFileTime
ExpungeConsoleCommandHistoryW
SetProcessWorkingSetSize
QueueUserAPC
FillConsoleOutputAttribute
SetConsoleFont
CreateFileMappingA
CloseProfileUserMapping
VirtualUnlock
QueueUserWorkItem
GetFileSize
CreateActCtxA
GlobalCompact
WriteConsoleOutputCharacterW
GetTimeFormatA
lstrcmpi
GetSystemInfo
ReadDirectoryChangesW
GetExpandedNameW
UnregisterWait
GetConsoleWindow
GetFileTime
SetEvent
WaitForSingleObjectEx
lstrcmpW
QueryActCtxW
SetThreadPriorityBoost
CreatePipe
LoadModule
TlsSetValue
GetTapeParameters
GetDiskFreeSpaceW
GetConsoleCommandHistoryA
LZInit
FindNextChangeNotification
InvalidateConsoleDIBits
GlobalFree
EnumResourceNamesA
lstrcatA
SetConsoleCursorPosition
Sleep
EraseTape
GetProfileIntW
lstrcpynA
FileTimeToLocalFileTime
CancelIo
SetCommState
SetHandleInformation
GetEnvironmentStringsA
SuspendThread
AddLocalAlternateComputerNameA
SetConsoleTitleW
SwitchToThread
RemoveVectoredExceptionHandler
GetConsoleFontInfo
FindResourceA
OpenConsoleW
MoveFileExA
GetVolumeNameForVolumeMountPointA
GetCommProperties
SetUserGeoID
GetLogicalDriveStringsA
SetComputerNameExW
VirtualQueryEx
BackupSeek
user32
CreateWindowExA
RealGetWindowClassA
EnumPropsExW
BroadcastSystemMessage
GetProgmanWindow
GetCursorPos
SetClassWord
CharNextA
IsRectEmpty
DestroyWindow
UnhookWindowsHook
RegisterRawInputDevices
EnableMenuItem
ValidateRgn
FlashWindowEx
EnumDisplaySettingsW
RedrawWindow
SetPropW
SetProcessDefaultLayout
CharUpperA
wvsprintfA
CliImmSetHotKey
LockWorkStation
ReasonCodeNeedsComment
GetMessageTime
GetLastActivePopup
IsCharAlphaNumericW
IsDialogMessageA
DdeInitializeW
SetMenuDefaultItem
ResolveDesktopForWOW
OpenWindowStationA
TabbedTextOutW
GetDlgItemInt
DrawFrameControl
IsChild
LoadIconW
IsHungAppWindow
UserRealizePalette
SetMenuContextHelpId
MapWindowPoints
OemToCharW
DestroyMenu
GetKeyNameTextA
SetMenuItemInfoA
GetTabbedTextExtentW
SendNotifyMessageW
IMPGetIMEA
RegisterWindowMessageA
ReuseDDElParam
LookupIconIdFromDirectoryEx
LoadStringW
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dat� Size: 178KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ