Static task
static1
Behavioral task
behavioral1
Sample
0545470832a04cf80da44a928419f9b771120af69d1c38ea7670767856bbc7e5.exe
Resource
win7-20221111-en
General
-
Target
0545470832a04cf80da44a928419f9b771120af69d1c38ea7670767856bbc7e5
-
Size
606KB
-
MD5
b1f752e49f691b3597e1a3b20ba49759
-
SHA1
3b6eb96a4dc671904e65f456f5e8a2927d18735a
-
SHA256
0545470832a04cf80da44a928419f9b771120af69d1c38ea7670767856bbc7e5
-
SHA512
f7eb72fb8db2c65a11476a46718dd8af8f16a65d79455f03f2218d27f9461415f98269acd1578f64af0110e802a425ce2f10e4cb193f27aa78077e3ad70e0949
-
SSDEEP
12288:qlbzkAXD21n/WaK7x5NCfQkNVHHjJ8dkE7QT6CJfiO3YN4:qlB21OtCfQCeyT6IB
Malware Config
Signatures
Files
-
0545470832a04cf80da44a928419f9b771120af69d1c38ea7670767856bbc7e5.exe windows x86
8246c74bb9b5d97048ffc1710831e38a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
FlushFileBuffers
GetModuleHandleW
GetCommConfig
QueueUserAPC
WritePrivateProfileStructA
SetFilePointerEx
GetOEMCP
GetLocaleInfoA
TlsFree
lstrcpyW
SetThreadPriority
MoveFileExW
WaitNamedPipeA
GetProcessPriorityBoost
SetEnvironmentVariableW
SetWaitableTimer
ReplaceFileA
GetEnvironmentVariableA
SetTapeParameters
GetVolumePathNameA
HeapAlloc
GetNumberFormatW
LCMapStringA
SetFileApisToANSI
GetNumberFormatA
GetComputerNameExW
FreeEnvironmentStringsA
Process32NextW
GetPriorityClass
GetVersionExA
UpdateResourceA
GetCurrentThreadId
lstrcpynA
GetTempFileNameA
GetComputerNameExA
_lwrite
GetSystemDefaultLangID
PurgeComm
RtlUnwind
WritePrivateProfileStringA
FindFirstVolumeMountPointA
GetVolumePathNameW
FatalAppExitA
SetFileApisToOEM
RemoveDirectoryW
GetStartupInfoA
OutputDebugStringW
MultiByteToWideChar
VerifyVersionInfoW
FatalAppExitW
GetProcessAffinityMask
DuplicateHandle
GlobalCompact
WaitForMultipleObjectsEx
user32
CreateCursor
ReuseDDElParam
DrawFrameControl
SetCaretPos
SetCursorPos
MessageBoxA
UnloadKeyboardLayout
SetWindowsHookA
IsClipboardFormatAvailable
SetShellWindow
CharLowerBuffA
PostThreadMessageA
DialogBoxParamA
IsCharAlphaA
CharPrevExA
GetDlgItem
LoadImageW
GetMenuItemCount
CascadeWindows
SwitchDesktop
UnhookWinEvent
FlashWindow
DdeConnect
GetLastInputInfo
SendMessageA
GetMenuBarInfo
InvalidateRgn
CharPrevW
EnableWindow
WindowFromPoint
PeekMessageW
DdeQueryNextServer
IsDialogMessageW
GetMessageTime
GetCursorPos
GetMenuCheckMarkDimensions
MonitorFromPoint
EnumDesktopsW
SetWindowContextHelpId
DdeGetData
GetThreadDesktop
TranslateAcceleratorA
DialogBoxIndirectParamW
WinHelpA
ClipCursor
DdeQueryStringW
EnumDisplayMonitors
TabbedTextOutA
SetClassWord
GetShellWindow
LockWindowUpdate
CreateAcceleratorTableA
IsCharAlphaNumericA
GetAltTabInfoW
DdeAddData
DrawMenuBar
GetKeyboardLayoutList
ValidateRgn
RegisterShellHookWindow
GetWindowTextLengthA
GetWindowModuleFileNameW
DdeCreateDataHandle
SetWindowsHookExW
GetDlgItemTextA
UnregisterDeviceNotification
RegisterWindowMessageW
GetCursorInfo
IsDialogMessageA
MessageBeep
FrameRect
SetPropA
DdeSetUserHandle
GetSubMenu
SetLastErrorEx
IMPGetIMEW
SendDlgItemMessageW
WaitMessage
ToAscii
DdeAccessData
TrackPopupMenu
IMPQueryIMEA
GetAsyncKeyState
SendMessageCallbackW
CopyAcceleratorTableW
MessageBoxIndirectA
DlgDirListW
DrawTextExA
LockSetForegroundWindow
SendInput
ShowWindow
GetDoubleClickTime
IMPSetIMEW
GetAncestor
IsZoomed
SetDlgItemTextW
LockWorkStation
GetInputState
GetScrollRange
MapVirtualKeyExA
ToUnicode
CharUpperBuffW
CharUpperBuffA
SendMessageCallbackA
SetRect
SetSysColors
FindWindowExW
DdeQueryStringA
GetClassInfoA
SetMenuContextHelpId
MenuItemFromPoint
RemovePropA
FillRect
TabbedTextOutW
AttachThreadInput
SetThreadDesktop
CreateAcceleratorTableW
GetQueueStatus
BroadcastSystemMessageW
IsDlgButtonChecked
GetCapture
GetUserObjectSecurity
GetDlgItemInt
FreeDDElParam
DrawIconEx
CheckMenuItem
ValidateRect
IsIconic
ShowScrollBar
OpenDesktopA
SendMessageTimeoutW
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ