Static task
static1
Behavioral task
behavioral1
Sample
054f6840cc52161cf61a25c2d3630c9e7957e7c85a7176ae892325efa2f76674.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
054f6840cc52161cf61a25c2d3630c9e7957e7c85a7176ae892325efa2f76674.exe
Resource
win10v2004-20221111-en
General
-
Target
054f6840cc52161cf61a25c2d3630c9e7957e7c85a7176ae892325efa2f76674
-
Size
187KB
-
MD5
5facc8d6aa075b833fc8b96acd583781
-
SHA1
d70a6cf9d6aad9319326269f1c5b60f0cb48310d
-
SHA256
054f6840cc52161cf61a25c2d3630c9e7957e7c85a7176ae892325efa2f76674
-
SHA512
ee32e1596976f07ab0035dd039b429abb96a17348843665d1caef95012354179403d194b1f643e50954501b5f8202a989c87cff915327d93460764e59cf7324c
-
SSDEEP
3072:IfWAj34P7R0BnXXy0/n2DKq5ErKsVjZqMNf+:0jFVEEmsHvG
Malware Config
Signatures
Files
-
054f6840cc52161cf61a25c2d3630c9e7957e7c85a7176ae892325efa2f76674.exe windows x86
c63a650a9bfd45ba9a5000a5ea5710c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuItemW
IntersectRect
InvalidateRect
IsChild
IsClipboardFormatAvailable
InsertMenuW
IsDialogMessageA
IsIconic
IsWindow
IsWindowEnabled
IsWindowUnicode
InflateRect
HideCaret
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharUpperA
AdjustWindowRectEx
ActivateKeyboardLayout
LoadStringW
MessageBoxA
IsDialogMessageW
SetMenu
CreateWindowExW
WindowFromPoint
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
ToAscii
SystemParametersInfoW
SubtractRect
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
CharNextW
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCaretPos
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindowEx
ScrollWindow
ScrollDC
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
NotifyWinEvent
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
DragAcceptFiles
DragQueryFileW
DragQueryFileA
DragQueryPoint
ExtractAssociatedIconW
ExtractIconW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragFinish
ole32
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CreateDataAdviseHolder
OleInitialize
OleUninitialize
RegisterDragDrop
StringFromCLSID
DoDragDrop
OleSetClipboard
OleGetClipboard
OleFlushClipboard
ReleaseStgMedium
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
RevokeDragDrop
CoInitialize
advapi32
RegFlushKey
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
LookupAccountNameW
GetUserNameW
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
RegQueryValueExW
RegOpenKeyExW
gdi32
GetRandomRgn
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsAlloc
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetVersionExW
CreateMutexW
TlsSetValue
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrlenA
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
HeapCreate
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
GetThreadIOPendingFlag
AreFileApisANSI
GetProcessPriorityBoost
CreateJobSet
GetCommandLineW
GetProcessVersion
DisableThreadLibraryCalls
DecodeSystemPointer
LockFile
TlsGetValue
HeapFree
GetCurrentProcessId
GetWriteWatch
SetTapePosition
EscapeCommFunction
RemoveVectoredExceptionHandler
GetFileType
SetMessageWaitingIndicator
CreateMemoryResourceNotification
GetComputerNameExW
CancelWaitableTimer
GetTapeStatus
CreateTapePartition
UnlockFile
GetProcessId
SetCommMask
GetStdHandle
CreateTimerQueue
EraseTape
GetThreadContext
GetProcessTimes
ContinueDebugEvent
RequestDeviceWakeup
GetTapeParameters
PeekNamedPipe
GetCommMask
ClearCommBreak
ResetWriteWatch
IsWow64Process
ResetEvent
SetCommState
SetMailslotInfo
ReadFileScatter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ExitThread
GetVersion
FlushInstructionCache
ConvertFiberToThread
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ