Static task
static1
Behavioral task
behavioral1
Sample
5da897c57ec36b60d3b6b84b4e3fafef51b00ed0934602c064c98951e80891de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5da897c57ec36b60d3b6b84b4e3fafef51b00ed0934602c064c98951e80891de.exe
Resource
win10v2004-20220812-en
General
-
Target
5da897c57ec36b60d3b6b84b4e3fafef51b00ed0934602c064c98951e80891de
-
Size
117KB
-
MD5
1b7b625b5df827341163e0c8819e12fd
-
SHA1
0ce90ea624f153e96636983ce7aa984a440ff31f
-
SHA256
5da897c57ec36b60d3b6b84b4e3fafef51b00ed0934602c064c98951e80891de
-
SHA512
3cc7e9f3f3c22e69d5408df8b58285b286e894699903e8d1924bfe0fa087c51c7842d7721c61d9ba89ea2d0e6dd9640d266cbe437a55245a0c884c5ca6767035
-
SSDEEP
3072:HqWx9yQUoXbcHI1XoAVw9/F+Y3jEd6rkpKT4zwzNYF:/yQFLcko2wFYd6RTmXF
Malware Config
Signatures
Files
-
5da897c57ec36b60d3b6b84b4e3fafef51b00ed0934602c064c98951e80891de.exe windows x86
f9748ed90e0c964068b044725c4dc5e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetIconSize
ImageList_DragMove
ImageList_DragLeave
ImageList_Merge
ImageList_AddMasked
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_GetDragImage
InitCommonControls
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_GetImageRect
ImageList_AddIcon
ImageList_Read
ImageList_DrawIndirect
ImageList_LoadImageW
user32
DrawTextW
GetFocus
CreateIcon
AlignRects
DrawTextA
AppendMenuA
LoadMenuA
InsertMenuA
CopyImage
CopyIcon
GetDC
AppendMenuW
EndDialog
CalcMenuBar
DrawIconEx
CloseWindow
DialogBoxParamW
LoadMenuA
BlockInput
CreateIcon
DialogBoxParamA
AppendMenuA
CopyRect
DrawIcon
GetWindowTextA
DrawTextW
IsWindow
DrawIconEx
GetWindowTextLengthA
GetFocus
EndDialog
LoadCursorA
advapi32
RegQueryValueExW
RegReplaceKeyA
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegEnumKeyW
RegQueryInfoKeyW
RegFlushKey
RegDeleteKeyW
RegLoadKeyA
RegQueryValueExA
RegEnumKeyExW
RegOpenKeyA
RegOpenKeyW
RegDeleteValueA
RegGetKeySecurity
kernel32
GetCommandLineA
lstrcpynA
GetStdHandle
GlobalFree
GetModuleHandleA
HeapAlloc
lstrcmpiA
WideCharToMultiByte
GetDateFormatA
GetCPInfo
SetLastError
FreeLibrary
CloseHandle
GlobalAlloc
DeleteFileA
lstrcmpA
GetFileAttributesA
GetFileType
GetLastError
GetStringTypeA
Sections
.KPSlh Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rpvp Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HvGSfN Size: 4KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AavbxB Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ