Static task
static1
Behavioral task
behavioral1
Sample
d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29.exe
Resource
win10v2004-20221111-en
General
-
Target
d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29
-
Size
125KB
-
MD5
3ddfd0617485214bb7652f7a4dc3ebdc
-
SHA1
a9d463354066834960d2581e5b89e5825e5a7ae7
-
SHA256
d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29
-
SHA512
89e4532eb3daea741e86e50530d57293f19e53b619d03e0a262a44bfc112320f48a6ee0dd7abe6d50712a1eb410d64ec11168fb32e9b6b76f3ecb4601cb3259f
-
SSDEEP
3072:udUo5nWTkStvJ+prtliH4+EvokIg80JxpiEt0gZ:+WTorlwMvoIDegZ
Malware Config
Signatures
Files
-
d819d48255cf226713904ff1c34e5f539ae470555ef57c73e3cbaed74aa52b29.exe windows x86
5527bd7d171e92ba200c1f0101de7f94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
SetStdHandle
LoadLibraryW
SetEnvironmentVariableA
MultiByteToWideChar
CompareStringW
HeapReAlloc
CreateFileA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetConsoleMode
WriteFile
CloseHandle
ExitProcess
GetTimeZoneInformation
WideCharToMultiByte
GetProcAddress
InterlockedDecrement
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
FlushFileBuffers
LCMapStringW
GetStringTypeW
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
WriteConsoleW
GetSystemTime
LocalFree
GetCurrentProcessId
GetVersionExA
GetNativeSystemInfo
GetCurrentThreadId
GetSystemInfo
GetLastError
GlobalUnlock
lstrlenW
IsDBCSLeadByte
HeapCreate
Sleep
FormatMessageA
SetEvent
GlobalLock
HeapAlloc
lstrlenA
GetModuleFileNameW
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
IsProcessorFeaturePresent
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
CreateFileW
user32
GetCursorInfo
RegisterClassA
EndPaint
ClientToScreen
GetMessageA
CloseClipboard
GetClassNameA
GetDlgItemInt
GetWindowRect
IsMenu
InsertMenuItemA
PostQuitMessage
FillRect
GetMenuItemID
GetSubMenu
GetFocus
LoadBitmapA
GetParent
AttachThreadInput
WindowFromPoint
GetClientRect
SendMessageA
SetRectEmpty
BeginPaint
GetIconInfo
GetDC
GetWindowThreadProcessId
OffsetRect
GetForegroundWindow
MapVirtualKeyA
SetRect
InvalidateRect
GetClipboardData
CreateWindowExA
GetDCEx
ReleaseDC
SetClassLongA
DrawStateW
ChangeClipboardChain
GetDlgItem
DefWindowProcA
GetSysColor
SetWindowPos
GetCursorPos
IsWindow
PostMessageA
DispatchMessageA
GetCursor
OpenClipboard
SystemParametersInfoA
GetSystemMetrics
LoadImageA
UpdateWindow
GetDlgItemTextA
SetClipboardViewer
DrawFrameControl
gdi32
GetBitmapBits
MoveToEx
BitBlt
GetTextExtentPoint32W
PatBlt
LineTo
SetTextColor
CreateFontIndirectA
SetBkColor
GdiFlush
DeleteObject
SelectObject
CreateCompatibleDC
CreateRectRgnIndirect
CreateCompatibleBitmap
GetTextExtentPointW
GetBkColor
SelectPalette
CreatePatternBrush
PolyBezier
GetTextMetricsA
CreateICA
GetStockObject
CreateSolidBrush
TextOutA
DeleteDC
advapi32
RegCloseKey
FreeSid
AllocateAndInitializeSid
RegCreateKeyExA
SetTokenInformation
RegQueryValueExA
RegSetValueExA
ole32
CoGetMalloc
CoTaskMemAlloc
oleaut32
OleCreateFontIndirect
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ