Static task
static1
Behavioral task
behavioral1
Sample
5d4e93f88929dc119865a7ba7d36b9511e26e967ae614e68ef322d8a53f05653.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5d4e93f88929dc119865a7ba7d36b9511e26e967ae614e68ef322d8a53f05653.exe
Resource
win10v2004-20220812-en
General
-
Target
5d4e93f88929dc119865a7ba7d36b9511e26e967ae614e68ef322d8a53f05653
-
Size
122KB
-
MD5
3df9664c89040027e1f03b92f597de27
-
SHA1
8b19d895f207c1751737e9b1e4d59228652edcd3
-
SHA256
5d4e93f88929dc119865a7ba7d36b9511e26e967ae614e68ef322d8a53f05653
-
SHA512
129aa8b477e9e8b6dd3c31a9664c7f9ebd977e9c0c598a26852220b8d1668040d7a78451bcd578af14776fe6fe8e0282a03a6d685b73b64fa5fedae67d3d6304
-
SSDEEP
3072:lANWCkRlzCt2dVt6TO0Tymjxo0cxaHLN3q:2NcRly2dv2x+xah
Malware Config
Signatures
Files
-
5d4e93f88929dc119865a7ba7d36b9511e26e967ae614e68ef322d8a53f05653.exe windows x86
27c00b2c6430326ba4a2429348dd23ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
RtlUnwind
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
WriteConsoleW
HeapReAlloc
SetEndOfFile
GetProcessHeap
ReadFile
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
CloseHandle
OutputDebugStringA
GetLastError
CreateFileW
GetVersionExW
Sleep
FormatMessageA
HeapAlloc
InterlockedIncrement
GetCPInfo
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
GetProcAddress
lstrlenA
FindResourceA
HeapCreate
EncodePointer
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
DecodePointer
user32
ShowScrollBar
GetSystemMetrics
DialogBoxParamA
CallMsgFilterA
EndDialog
GetDlgItem
SetScrollPos
GetMenuItemInfoA
EnableScrollBar
DispatchMessageW
AppendMenuA
CharToOemBuffA
GetWindowRect
GetMessageW
SetForegroundWindow
LoadBitmapA
LoadMenuA
wsprintfA
GetClientRect
CreateMenu
GetWindowTextLengthA
SendMessageA
EnumWindows
SetScrollRange
GetDC
TranslateMessage
GetMenu
GetWindowTextA
InvalidateRect
gdi32
CreateCompatibleBitmap
EndPage
StartPage
DeleteDC
GetDIBits
DeleteObject
SelectObject
CreateCompatibleDC
EndDoc
Rectangle
StartDocA
ChoosePixelFormat
SetPixelFormat
TextOutA
comdlg32
PrintDlgA
GetSaveFileNameA
advapi32
OpenServiceA
CloseServiceHandle
DeleteService
OpenSCManagerA
ControlService
shell32
SHGetDesktopFolder
SHGetMalloc
ole32
CoInitialize
CLSIDFromProgID
CoUninitialize
oleaut32
SysAllocString
VariantInit
GetActiveObject
VariantChangeType
RegisterActiveObject
comctl32
ImageList_Create
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_AddMasked
ImageList_GetImageCount
imm32
ImmAssociateContext
uxtheme
CloseThemeData
OpenThemeData
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ