Static task
static1
Behavioral task
behavioral1
Sample
5154aed1c1c8c84c2551daa04b458fecccfbb2b01f90d529191aefb9ae44c880.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5154aed1c1c8c84c2551daa04b458fecccfbb2b01f90d529191aefb9ae44c880.exe
Resource
win10v2004-20220812-en
General
-
Target
5154aed1c1c8c84c2551daa04b458fecccfbb2b01f90d529191aefb9ae44c880
-
Size
299KB
-
MD5
3aa75ed47341725056cb995f6bf3a40d
-
SHA1
b504c2450856046fc2e66041c20a65ffce7cac29
-
SHA256
5154aed1c1c8c84c2551daa04b458fecccfbb2b01f90d529191aefb9ae44c880
-
SHA512
00427b10f7572adb953e38e61aed6c0abbbf0e9b988ab65411cc975bad0fd18a49a37621dd229f4437388ca8e992efc79cdf444eae73790e41938570ea0f738b
-
SSDEEP
3072:NU6nXNyVa/Cb5Fr6LF3w41VTg3yHYilStAg0FuNmyDjCdCyADnEtMPpXlx:O4yVaauR3w2VTg3+jlStAOwCRDe+Fb
Malware Config
Signatures
Files
-
5154aed1c1c8c84c2551daa04b458fecccfbb2b01f90d529191aefb9ae44c880.exe windows x86
526331b92129fa40ac1b8e92b91a829a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
wsprintfW
GetWindowTextA
SetFocus
SetWindowTextA
EndDialog
DialogBoxParamW
GetWindowThreadProcessId
MessageBoxW
FindWindowExW
SetWindowTextW
CreateDialogParamW
SetWindowPos
SendMessageW
SetWindowLongW
GetDlgItem
GetWindowLongW
GetClientRect
GetWindowRect
ClientToScreen
dbghelp
SymGetOptions
ImageDirectoryEntryToData
SymFromAddr
ImageRvaToVa
SymUnDName
SymSetSearchPath
kernel32
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
RaiseException
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LoadLibraryA
SetEvent
CloseHandle
CreateEventA
InterlockedPushEntrySList
InitializeSListHead
SetConsoleActiveScreenBuffer
WaitForMultipleObjects
GetWindowsDirectoryW
InitAtomTable
ReadConsoleW
FormatMessageW
GetSystemTimeAsFileTime
GetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
DeleteCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
Sections
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ