Static task
static1
Behavioral task
behavioral1
Sample
5f782e49f5b8eb787cb530303e018e9b920a4281c6627c7ad2dbf0d3f9dcf598.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f782e49f5b8eb787cb530303e018e9b920a4281c6627c7ad2dbf0d3f9dcf598.exe
Resource
win10v2004-20220901-en
General
-
Target
5f782e49f5b8eb787cb530303e018e9b920a4281c6627c7ad2dbf0d3f9dcf598
-
Size
192KB
-
MD5
5264afec438bba93980d4123c48a8db5
-
SHA1
2d918009efc145413adf837ace4f691e6e1bcc70
-
SHA256
5f782e49f5b8eb787cb530303e018e9b920a4281c6627c7ad2dbf0d3f9dcf598
-
SHA512
8ed6f066ba866c618318ca207cc5016f92589dcd23807dc3242802ca079936cf1a03a213640a4816bef6f0d2346daf3141a409962c1685cd73a06fcc0c806bde
-
SSDEEP
3072:W2Ta0E+hES8LHz8h1lXcGrXmkNap91g1e12:Wj0E+hlfWGrXst
Malware Config
Signatures
Files
-
5f782e49f5b8eb787cb530303e018e9b920a4281c6627c7ad2dbf0d3f9dcf598.exe windows x86
52a009d3ce5db4682a8954442b8587ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
FindTextA
oleaut32
SafeArrayCreate
SafeArrayGetElement
RegisterTypeLib
SysStringLen
SafeArrayUnaccessData
VariantCopyInd
OleLoadPicture
user32
IsChild
CharNextA
RemovePropA
ReleaseCapture
ActivateKeyboardLayout
DefWindowProcA
SetWindowLongA
SetClipboardData
EnableScrollBar
WaitMessage
RemoveMenu
GetSubMenu
GetKeyState
PostMessageA
UpdateWindow
GetSysColorBrush
LoadCursorA
ScreenToClient
GetWindow
IsWindowEnabled
GetKeyboardLayout
SetScrollPos
BeginPaint
KillTimer
GetKeyboardLayoutNameA
FrameRect
ChildWindowFromPoint
DrawTextA
wsprintfA
PostQuitMessage
DefMDIChildProcA
PtInRect
SendMessageW
SetWindowPos
GetActiveWindow
CallWindowProcA
GetMenu
EnumWindows
CheckMenuItem
IsIconic
SetActiveWindow
GetClipboardData
GetWindowRect
SetCursor
EmptyClipboard
RegisterWindowMessageA
DestroyCursor
DrawMenuBar
DestroyIcon
DeleteMenu
EndPaint
SetScrollInfo
SystemParametersInfoA
IsWindow
InsertMenuA
EnumChildWindows
SetTimer
DrawFrameControl
TranslateMessage
MessageBoxA
MoveWindow
GetSystemMenu
InflateRect
GetMenuStringA
GetClassNameA
DestroyMenu
CallNextHookEx
GetKeyboardState
LoadKeyboardLayoutA
GetWindowLongW
PeekMessageA
GetCursor
CreateIcon
ole32
CreateBindCtx
CoRegisterClassObject
MkParseDisplayName
shell32
SHGetFileInfoA
SHGetDiskFreeSpaceA
SHGetFolderPathA
kernel32
LocalAlloc
GetModuleHandleA
ExitThread
GetACP
VirtualAlloc
GetVersionExA
GetProcAddress
GetOEMCP
LoadLibraryA
ExitProcess
VirtualAllocEx
GetLastError
LoadLibraryExA
IsBadReadPtr
advapi32
GetUserNameA
RegEnumValueA
version
VerInstallFileA
GetFileVersionInfoA
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC5 Size: 1024B - Virtual size: 671B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC7 Size: 1024B - Virtual size: 705B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC3 Size: 512B - Virtual size: 42B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ