Static task
static1
Behavioral task
behavioral1
Sample
edf50a55ec983a8bb1e77082223de8abc69e08385864630f969f0e5d70ed50b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edf50a55ec983a8bb1e77082223de8abc69e08385864630f969f0e5d70ed50b3.exe
Resource
win10v2004-20220812-en
General
-
Target
edf50a55ec983a8bb1e77082223de8abc69e08385864630f969f0e5d70ed50b3
-
Size
212KB
-
MD5
dfe418e1f5b0b800967dfe60d40a880f
-
SHA1
f9386254961ea35167c0c7c05117bf7b5dc5049f
-
SHA256
edf50a55ec983a8bb1e77082223de8abc69e08385864630f969f0e5d70ed50b3
-
SHA512
e90106df9eee270fad80159a79cdf5395f705128d89b6bd4c02e8c513a65e592d9a30b32b50447920eee8753319043e520dcac91cd228a7ac57846133b11f284
-
SSDEEP
6144:cLOfykIWg/I+Omd6n1ENGQNGmt7pymnb4qNWHf:wG9xtO/bS
Malware Config
Signatures
Files
-
edf50a55ec983a8bb1e77082223de8abc69e08385864630f969f0e5d70ed50b3.exe windows x86
b3ad2e304cce6977b6fd00c2c5019210
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMonitorInfoA
GetKeyboardState
RemoveMenu
GetKeyboardLayout
LoadStringW
CheckDlgButton
DialogBoxParamW
VkKeyScanA
ValidateRgn
GetComboBoxInfo
GetMouseMovePointsEx
ExcludeUpdateRgn
GetKeyboardType
GetCursorPos
IsWindow
EnumClipboardFormats
GetGuiResources
CreateAcceleratorTableW
InvalidateRect
OpenClipboard
GetAltTabInfoA
GetMenuState
WindowFromDC
IsCharAlphaW
DrawAnimatedRects
GetMessageTime
GetWindowContextHelpId
GetCursor
MonitorFromPoint
ScrollDC
GetCapture
IsCharAlphaA
ReplyMessage
DefFrameProcW
GetTopWindow
BeginDeferWindowPos
GetScrollPos
NotifyWinEvent
GetGUIThreadInfo
ScrollWindow
GetKeyState
GetAncestor
IsChild
KillTimer
GetMenuDefaultItem
EndDeferWindowPos
GetClipboardViewer
GetThreadDesktop
ScrollWindowEx
GetScrollBarInfo
GetLastActivePopup
advapi32
GetSecurityDescriptorLength
RegCreateKeyW
GetKernelObjectSecurity
gdi32
GetTextMetricsA
EnumFontFamiliesExA
crypt32
CryptMsgOpenToDecode
version
VerQueryValueA
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
TerminateProcess
UnhandledExceptionFilter
GetNumaNodeProcessorMask
SetHandleCount
GetEnvironmentStringsW
FindFirstFileExW
GetThreadPriority
ResetWriteWatch
FindNextChangeNotification
LockResource
GetFileAttributesExW
LocalShrink
CreateIoCompletionPort
MapUserPhysicalPagesScatter
GetModuleFileNameW
CreateMemoryResourceNotification
TlsSetValue
GetStdHandle
GetThreadContext
QueryMemoryResourceNotification
PurgeComm
EscapeCommFunction
RequestWakeupLatency
HeapAlloc
PrepareTape
GetProcessHeap
SetSystemTimeAdjustment
EncodePointer
GetFileSize
GetNumaAvailableMemoryNode
ReleaseSemaphore
GetVersion
SetEndOfFile
SetDllDirectoryA
IsDBCSLeadByte
GetLocalTime
GetSystemTimeAsFileTime
HeapDestroy
GetCommandLineW
FileTimeToLocalFileTime
FindResourceExW
GetUserDefaultLCID
SetFileAttributesA
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ