Static task
static1
Behavioral task
behavioral1
Sample
5f0ce5196a89810b33b2d52b3cc36621a10f08893aaff4cb412a711de4991e3a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f0ce5196a89810b33b2d52b3cc36621a10f08893aaff4cb412a711de4991e3a.exe
Resource
win10v2004-20220812-en
General
-
Target
5f0ce5196a89810b33b2d52b3cc36621a10f08893aaff4cb412a711de4991e3a
-
Size
496KB
-
MD5
e17e7bbaebaf5a93d3e5680dad5faffc
-
SHA1
b63063422d9e530ec4f7ded72abe337a0d6914d3
-
SHA256
5f0ce5196a89810b33b2d52b3cc36621a10f08893aaff4cb412a711de4991e3a
-
SHA512
c384754260c0f6aa2733888f20d5f2fbb0d8e5c917dbbc48ca8bfc007e9509fbdbd5f32a3e58efca44d55b87773796f7ea07072d66e6f9f5f579d24d1f19983b
-
SSDEEP
6144:AukjZlHPQYPx3LPrpPVEzh6SWnk15oVWlG9aodLoudYv/77UGk:xkHHPTp3pPVLSJ/o049ao+udYb7UGk
Malware Config
Signatures
Files
-
5f0ce5196a89810b33b2d52b3cc36621a10f08893aaff4cb412a711de4991e3a.exe windows x86
221d7dac443c9793faa4df67c81b90ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_Create
ImageList_GetDragImage
CreateMappedBitmap
ImageList_Read
ImageList_GetBkColor
ImageList_Destroy
ImageList_GetImageRect
ImageList_Merge
ImageList_SetOverlayImage
ImageList_Add
kernel32
HeapSize
HeapAlloc
WaitForSingleObject
GetProcessHeap
GetCommandLineW
WriteConsoleW
TlsSetValue
DeleteCriticalSection
CreateMailslotA
GetFileType
GetModuleFileNameW
GetThreadSelectorEntry
TlsAlloc
GetConsoleOutputCP
EnterCriticalSection
ReadFile
CloseHandle
GetLocaleInfoA
LeaveCriticalSection
SetStdHandle
ExitProcess
WideCharToMultiByte
GetStdHandle
SetEnvironmentVariableA
TlsFree
GetStringTypeA
GlobalFlags
GetFileAttributesExW
IsDebuggerPresent
GetTimeFormatA
WriteProfileStringW
LocalCompact
QueryPerformanceCounter
IsValidCodePage
SetHandleCount
GetPrivateProfileSectionW
InterlockedIncrement
GetStartupInfoA
ExpandEnvironmentStringsW
GetExitCodeProcess
CreateMutexA
ReadFileEx
FoldStringW
FreeLibrary
SetLastError
GetModuleFileNameA
GetPrivateProfileStructW
UnmapViewOfFile
GetTimeZoneInformation
GetCurrentThread
OpenMutexA
GetModuleHandleA
LCMapStringW
SetFilePointer
GetConsoleMode
CreateFileA
SetUnhandledExceptionFilter
WritePrivateProfileStructW
UnhandledExceptionFilter
EnumSystemLocalesA
FlushFileBuffers
WriteConsoleA
GetSystemTimeAsFileTime
lstrlen
InterlockedDecrement
GetUserDefaultLCID
GetStringTypeW
GetOEMCP
GetProcessAffinityMask
DeleteAtom
TerminateProcess
SetThreadContext
SetConsoleCtrlHandler
GetCurrentProcessId
WriteFile
GetCommandLineA
LoadLibraryA
GetProcAddress
WaitForMultipleObjectsEx
EnumSystemCodePagesA
GetCPInfo
GetCurrentThreadId
GetLocaleInfoW
HeapDestroy
OpenMutexW
HeapFree
CompareStringW
GetModuleHandleW
GetDateFormatA
CopyFileA
RtlUnwind
Sleep
GetTickCount
EnumDateFormatsW
HeapReAlloc
HeapCreate
GetEnvironmentStringsW
GetLastError
LCMapStringA
VirtualQuery
ExpandEnvironmentStringsA
CompareStringA
InterlockedExchange
IsValidLocale
GetConsoleCP
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsA
GetACP
GetVersion
GetCurrentProcess
MultiByteToWideChar
GetLogicalDrives
VirtualAlloc
VirtualFree
GetStartupInfoW
TlsGetValue
advapi32
InitiateSystemShutdownA
RegQueryMultipleValuesA
RevertToSelf
LookupPrivilegeDisplayNameW
RegCreateKeyExA
user32
SetWindowLongA
IsCharUpperA
DrawIconEx
DlgDirListW
CreateWindowExW
SendNotifyMessageA
DdeFreeDataHandle
MessageBoxA
GetWindowLongA
RealGetWindowClass
RegisterClassA
WindowFromPoint
DestroyWindow
GetClassLongW
TrackPopupMenu
IsDlgButtonChecked
LoadBitmapA
ShowWindow
SendMessageA
EnumWindows
CloseWindow
ReuseDDElParam
DefWindowProcA
RegisterClassExA
LoadIconW
shell32
FindExecutableA
SHFormatDrive
DragAcceptFiles
comdlg32
FindTextW
Sections
.text Size: 172KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ