Static task
static1
Behavioral task
behavioral1
Sample
a5411a16c6fcb56229812fea3b1a2fd54bdbf295047147880a3ced4e16abaa71.exe
Resource
win7-20220901-en
General
-
Target
a5411a16c6fcb56229812fea3b1a2fd54bdbf295047147880a3ced4e16abaa71
-
Size
1.8MB
-
MD5
2aad7cb284dc6c4109d4bf88509ce495
-
SHA1
c70693f6a3a76e9d07b8e17fa6183b9209cba22b
-
SHA256
a5411a16c6fcb56229812fea3b1a2fd54bdbf295047147880a3ced4e16abaa71
-
SHA512
651c5ad4c4643afa67d808e0be2c29778fe235105c940992b4ff2929970a3272eca035c937efb692f430222b4ce70a4ac52fcd7863e323ead5a601f25c0c01bd
-
SSDEEP
49152:z2Gh3PxFkngFqe9mKlJpQVjO4xb7D8kdd:zfhDCe9mioj/bEk/
Malware Config
Signatures
Files
-
a5411a16c6fcb56229812fea3b1a2fd54bdbf295047147880a3ced4e16abaa71.exe windows x86
b9d3ed5781cd86eddefc882006b07b88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
FreeLibrary
GlobalAlloc
lstrcmpA
GlobalLock
InterlockedExchange
CompareStringA
GetLocaleInfoA
GetModuleFileNameA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
GlobalAddAtomA
GetCurrentProcessId
MulDiv
MultiByteToWideChar
LocalFree
FormatMessageA
GlobalUnlock
CreateDirectoryA
FreeResource
GetModuleFileNameW
InterlockedDecrement
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
WritePrivateProfileStringA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
GetModuleHandleW
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
VirtualAlloc
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetACP
IsValidCodePage
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
LocalFileTimeToFileTime
lstrlenA
SystemTimeToFileTime
ReadFile
SetFilePointer
Sleep
GetSystemInfo
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CreateThread
GetTickCount
TerminateThread
WaitForSingleObject
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
lstrcatA
FindFirstFileA
lstrcpyA
GetLastError
FindClose
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteFileA
CreateFileA
WriteFile
GlobalFree
CloseHandle
user32
WinHelpA
SendDlgItemMessageA
LoadIconA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadCursorA
GetSysColorBrush
UnregisterClassA
MapWindowPoints
TrackPopupMenu
SetMenu
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SystemParametersInfoA
GetSystemMetrics
DestroyMenu
GetWindowTextLengthA
UnhookWindowsHookEx
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
ReleaseDC
GetDC
ScreenToClient
GetMenuItemID
GetMenuItemCount
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
LoadBitmapA
AppendMenuA
GetSubMenu
LoadMenuA
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetWindowTextA
GetForegroundWindow
PostMessageA
GetSystemMenu
ClientToScreen
UpdateWindow
GetClassLongA
GetClassNameA
GetTopWindow
GetMessageTime
InvalidateRect
SetCapture
SendMessageA
EnableWindow
FlashWindow
ReleaseCapture
SetWindowLongA
GetWindowLongA
CopyRect
PtInRect
OffsetRect
FillRect
DrawIcon
GetClientRect
GetActiveWindow
GetCapture
GetParent
GetSysColor
SetRect
TabbedTextOutA
SetPropA
GetPropA
RemovePropA
WindowFromPoint
SetFocus
GetMessagePos
wsprintfA
GrayStringA
DrawTextExA
DrawTextA
gdi32
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
GetDeviceCaps
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
LineTo
MoveToEx
DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
CreateSolidBrush
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
CreatePen
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
DeleteDC
CreateBitmap
shell32
ShellExecuteA
shlwapi
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ