Static task
static1
Behavioral task
behavioral1
Sample
50beca6375754ab85f16b3da8a263fb06f7c2e385db8bc5e58f1fa32e8dfacd0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
50beca6375754ab85f16b3da8a263fb06f7c2e385db8bc5e58f1fa32e8dfacd0.exe
Resource
win10v2004-20221111-en
General
-
Target
50beca6375754ab85f16b3da8a263fb06f7c2e385db8bc5e58f1fa32e8dfacd0
-
Size
276KB
-
MD5
fe2c73b7926c8db7fd0bd1f48c119b20
-
SHA1
4c1f800f0c9e47c5d0b495d8124961f589870f4f
-
SHA256
50beca6375754ab85f16b3da8a263fb06f7c2e385db8bc5e58f1fa32e8dfacd0
-
SHA512
510c5d829e2b69bc6d9e2835d1b7cf973bbb0f8b47937b8a0c18cf3bdc220c4fae692e43eac912da6ae8274d2aa2db076a234d3b7fec61d9633dc64b353b3c20
-
SSDEEP
6144:l1ObMZMNJDxhxEznImbrasxAq14P6guSv6FHu:l6DLwnImSsxwPGC6FHu
Malware Config
Signatures
Files
-
50beca6375754ab85f16b3da8a263fb06f7c2e385db8bc5e58f1fa32e8dfacd0.exe windows x86
65ebe5cd90f7fd930ca2af1473b1e18d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hookinj
g_Buffer
g_szPathAuto
g_hVLWnd
kernel32
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
HeapSize
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
SetErrorMode
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleFileNameA
GetExitCodeThread
WaitForSingleObject
CloseHandle
CreateRemoteThread
GetProcAddress
GetModuleHandleW
OpenProcess
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
Sleep
WriteFile
CreateFileA
ReadFile
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GetVersionExA
MultiByteToWideChar
lstrcmpW
SetLastError
GetLastError
LoadLibraryA
CompareStringW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
FreeLibrary
LoadLibraryW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
WritePrivateProfileStringW
GetThreadLocale
lstrlenA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
lstrlenW
InterlockedDecrement
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameW
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
InterlockedExchange
GetModuleHandleA
WideCharToMultiByte
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
user32
GetSysColorBrush
WindowFromPoint
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
UnregisterClassW
GetWindowPlacement
GetWindowRect
GetWindow
DestroyMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SetWindowTextA
GetWindowTextA
FindWindowW
MessageBoxA
PostMessageA
IsWindow
GetSystemMetrics
LoadIconW
GetClientRect
IsIconic
DrawIcon
GetWindowThreadProcessId
PostMessageW
LoadCursorW
GetParent
SetCursor
SendMessageW
KillTimer
SetTimer
EnableWindow
UnregisterClassA
gdi32
SetBkMode
SetMapMode
DeleteObject
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
RestoreDC
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SaveDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32W
CreateFontIndirectW
OffsetViewportOrgEx
GetObjectW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
ShellExecuteA
ShellExecuteW
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE