Static task
static1
Behavioral task
behavioral1
Sample
d59750db09c25e7614b691ef7f21263ba9df726437edaf4106db6421e0ce18c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d59750db09c25e7614b691ef7f21263ba9df726437edaf4106db6421e0ce18c5.exe
Resource
win10v2004-20220812-en
General
-
Target
d59750db09c25e7614b691ef7f21263ba9df726437edaf4106db6421e0ce18c5
-
Size
606KB
-
MD5
8006ee445fe2e92eea8ec40da8e56e73
-
SHA1
0f90c8b004f936011deaa9a6ba9f931bdd8d900c
-
SHA256
d59750db09c25e7614b691ef7f21263ba9df726437edaf4106db6421e0ce18c5
-
SHA512
104b79724108fce49f0ff9b9863e6fdaba66807d0fbc1abd0fe47a1b0d7cd1260314e32accdb419664e652c227e84cb4f41b15a5ed9937aff685376709a570cc
-
SSDEEP
12288:albzkAXD21n/WaK7x5NCfQkNVHHjJ8dkE7QT6CJfiO3YN4:alB21OtCfQCeyT6IB
Malware Config
Signatures
Files
-
d59750db09c25e7614b691ef7f21263ba9df726437edaf4106db6421e0ce18c5.exe windows x86
8246c74bb9b5d97048ffc1710831e38a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
FlushFileBuffers
GetModuleHandleW
GetCommConfig
QueueUserAPC
WritePrivateProfileStructA
SetFilePointerEx
GetOEMCP
GetLocaleInfoA
TlsFree
lstrcpyW
SetThreadPriority
MoveFileExW
WaitNamedPipeA
GetProcessPriorityBoost
SetEnvironmentVariableW
SetWaitableTimer
ReplaceFileA
GetEnvironmentVariableA
SetTapeParameters
GetVolumePathNameA
HeapAlloc
GetNumberFormatW
LCMapStringA
SetFileApisToANSI
GetNumberFormatA
GetComputerNameExW
FreeEnvironmentStringsA
Process32NextW
GetPriorityClass
GetVersionExA
UpdateResourceA
GetCurrentThreadId
lstrcpynA
GetTempFileNameA
GetComputerNameExA
_lwrite
GetSystemDefaultLangID
PurgeComm
RtlUnwind
WritePrivateProfileStringA
FindFirstVolumeMountPointA
GetVolumePathNameW
FatalAppExitA
SetFileApisToOEM
RemoveDirectoryW
GetStartupInfoA
OutputDebugStringW
MultiByteToWideChar
VerifyVersionInfoW
FatalAppExitW
GetProcessAffinityMask
DuplicateHandle
GlobalCompact
WaitForMultipleObjectsEx
user32
CreateCursor
ReuseDDElParam
DrawFrameControl
SetCaretPos
SetCursorPos
MessageBoxA
UnloadKeyboardLayout
SetWindowsHookA
IsClipboardFormatAvailable
SetShellWindow
CharLowerBuffA
PostThreadMessageA
DialogBoxParamA
IsCharAlphaA
CharPrevExA
GetDlgItem
LoadImageW
GetMenuItemCount
CascadeWindows
SwitchDesktop
UnhookWinEvent
FlashWindow
DdeConnect
GetLastInputInfo
SendMessageA
GetMenuBarInfo
InvalidateRgn
CharPrevW
EnableWindow
WindowFromPoint
PeekMessageW
DdeQueryNextServer
IsDialogMessageW
GetMessageTime
GetCursorPos
GetMenuCheckMarkDimensions
MonitorFromPoint
EnumDesktopsW
SetWindowContextHelpId
DdeGetData
GetThreadDesktop
TranslateAcceleratorA
DialogBoxIndirectParamW
WinHelpA
ClipCursor
DdeQueryStringW
EnumDisplayMonitors
TabbedTextOutA
SetClassWord
GetShellWindow
LockWindowUpdate
CreateAcceleratorTableA
IsCharAlphaNumericA
GetAltTabInfoW
DdeAddData
DrawMenuBar
GetKeyboardLayoutList
ValidateRgn
RegisterShellHookWindow
GetWindowTextLengthA
GetWindowModuleFileNameW
DdeCreateDataHandle
SetWindowsHookExW
GetDlgItemTextA
UnregisterDeviceNotification
RegisterWindowMessageW
GetCursorInfo
IsDialogMessageA
MessageBeep
FrameRect
SetPropA
DdeSetUserHandle
GetSubMenu
SetLastErrorEx
IMPGetIMEW
SendDlgItemMessageW
WaitMessage
ToAscii
DdeAccessData
TrackPopupMenu
IMPQueryIMEA
GetAsyncKeyState
SendMessageCallbackW
CopyAcceleratorTableW
MessageBoxIndirectA
DlgDirListW
DrawTextExA
LockSetForegroundWindow
SendInput
ShowWindow
GetDoubleClickTime
IMPSetIMEW
GetAncestor
IsZoomed
SetDlgItemTextW
LockWorkStation
GetInputState
GetScrollRange
MapVirtualKeyExA
ToUnicode
CharUpperBuffW
CharUpperBuffA
SendMessageCallbackA
SetRect
SetSysColors
FindWindowExW
DdeQueryStringA
GetClassInfoA
SetMenuContextHelpId
MenuItemFromPoint
RemovePropA
FillRect
TabbedTextOutW
AttachThreadInput
SetThreadDesktop
CreateAcceleratorTableW
GetQueueStatus
BroadcastSystemMessageW
IsDlgButtonChecked
GetCapture
GetUserObjectSecurity
GetDlgItemInt
FreeDDElParam
DrawIconEx
CheckMenuItem
ValidateRect
IsIconic
ShowScrollBar
OpenDesktopA
SendMessageTimeoutW
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ