Static task
static1
Behavioral task
behavioral1
Sample
52bc45cec25671fb6e84d8526e5f58e62bff70f7c9b212b147eb9b1088da7c92.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52bc45cec25671fb6e84d8526e5f58e62bff70f7c9b212b147eb9b1088da7c92.exe
Resource
win10v2004-20220901-en
General
-
Target
52bc45cec25671fb6e84d8526e5f58e62bff70f7c9b212b147eb9b1088da7c92
-
Size
360KB
-
MD5
991ae0d671b28ac40efd76ca8f0be14d
-
SHA1
a41db9691c2197ed6791d1682df281e0c89ff49f
-
SHA256
52bc45cec25671fb6e84d8526e5f58e62bff70f7c9b212b147eb9b1088da7c92
-
SHA512
8490954bd7ba4043550c6d55b095c233ec1397fd31ef5395f5f47141f4662067a270b2eaf5e5468caccd2e1e4820b93a71891d6cc227af524f7ee794c32759ea
-
SSDEEP
6144:tbKVR1sfLq44zbL42bBE1VgVI/F921aVkg94JwVl+VwusSK1ap5yQuD:t+VRpvL42bID2Ejq4l+Vwp1G
Malware Config
Signatures
Files
-
52bc45cec25671fb6e84d8526e5f58e62bff70f7c9b212b147eb9b1088da7c92.exe windows x86
b38f1b6c0e1f063d30575f9b134db44c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetFontData
PlgBlt
advapi32
RegQueryInfoKeyW
RegDeleteKeyA
wininet
HttpSendRequestExA
kernel32
HeapFree
FreeLibrary
LocalLock
HeapReAlloc
SetStdHandle
GetStdHandle
OpenMutexA
TlsAlloc
GetPrivateProfileIntW
HeapCreate
CreateMutexA
GetEnvironmentStrings
GetUserDefaultLCID
GetVersionExA
SetFileAttributesW
InterlockedDecrement
ReleaseMutex
VirtualQuery
GetTimeZoneInformation
EnumSystemLocalesA
lstrcat
GetSystemDefaultLCID
LCMapStringW
InitializeCriticalSection
FileTimeToDosDateTime
GetCurrentThread
TerminateProcess
RemoveDirectoryA
LCMapStringA
GetSystemTimeAsFileTime
WriteConsoleOutputAttribute
UnhandledExceptionFilter
GetProcessHeap
FlushFileBuffers
GetDateFormatW
GetStartupInfoA
GetStartupInfoW
GetProfileStringA
GetLocaleInfoA
GetCPInfo
ExitProcess
SetFilePointer
GetModuleFileNameW
SetEnvironmentVariableA
GetProcAddress
WideCharToMultiByte
OutputDebugStringA
SetUnhandledExceptionFilter
HeapDestroy
AddAtomW
GetLocaleInfoW
GetLastError
CreateFileMappingW
ReadFile
GetTickCount
GetCurrentProcessId
GetTimeFormatA
GetCurrentThreadId
WaitForDebugEvent
GetMailslotInfo
LockResource
GetVolumeInformationW
CreateWaitableTimerW
HeapSize
ReadConsoleOutputCharacterW
GetCommandLineW
WriteConsoleA
GetConsoleMode
TlsSetValue
GetLocalTime
CreateDirectoryExW
WriteConsoleW
GetConsoleOutputCP
GetModuleHandleA
LoadLibraryA
FreeEnvironmentStringsA
CreateFileA
SetConsoleCtrlHandler
IsValidCodePage
GetCommandLineA
VirtualFree
QueryPerformanceCounter
GetStringTypeA
InterlockedExchange
lstrlenA
IsDebuggerPresent
GetConsoleCP
CompareStringA
GetExitCodeThread
SetConsoleActiveScreenBuffer
RtlFillMemory
SetLastError
DeleteCriticalSection
LeaveCriticalSection
GetOEMCP
GetModuleFileNameA
LocalReAlloc
Sleep
lstrcmpA
FindFirstFileExW
CloseHandle
InterlockedIncrement
GetThreadSelectorEntry
WriteFile
GetACP
DeleteFiber
CommConfigDialogA
GetEnvironmentStringsW
VirtualAlloc
GetCurrentProcess
GetStringTypeW
IsValidLocale
RtlUnwind
CreateEventA
TlsFree
TlsGetValue
GetDateFormatA
CompareStringW
WaitForSingleObjectEx
SetHandleCount
EnterCriticalSection
EnumResourceLanguagesW
SetConsoleTitleW
MultiByteToWideChar
GetFileType
HeapAlloc
SetConsoleOutputCP
FreeEnvironmentStringsW
FlushConsoleInputBuffer
GetVersion
user32
SetForegroundWindow
ShowScrollBar
ScrollWindow
EnableMenuItem
GetMenuState
ChangeClipboardChain
IsDialogMessageA
GetUserObjectInformationA
LoadMenuA
MapVirtualKeyExA
EnumDesktopsA
ValidateRect
ToUnicodeEx
SetWindowsHookW
IsCharUpperW
RegisterClassExA
RegisterClassA
DialogBoxParamA
EnumDisplaySettingsA
GetClipboardFormatNameW
ReuseDDElParam
CreateWindowExW
WinHelpA
GetActiveWindow
PackDDElParam
InflateRect
GetUpdateRgn
SwitchDesktop
GetScrollBarInfo
OemToCharBuffW
GetAsyncKeyState
DrawCaption
DrawTextW
comctl32
InitCommonControlsEx
CreateMappedBitmap
shell32
SHGetPathFromIDListA
SHQueryRecycleBinA
RealShellExecuteA
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ