Static task
static1
Behavioral task
behavioral1
Sample
58e9d6613a82522c1f17e39a83ecb34b7fcae7fa8f2c7e740bf4f5bf4d82ec70.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58e9d6613a82522c1f17e39a83ecb34b7fcae7fa8f2c7e740bf4f5bf4d82ec70.exe
Resource
win10v2004-20221111-en
General
-
Target
58e9d6613a82522c1f17e39a83ecb34b7fcae7fa8f2c7e740bf4f5bf4d82ec70
-
Size
141KB
-
MD5
2fe46e434cad31a684aa87a6a16c8131
-
SHA1
e3055c92237fbcc524da3093a3b58857b1ac9e14
-
SHA256
58e9d6613a82522c1f17e39a83ecb34b7fcae7fa8f2c7e740bf4f5bf4d82ec70
-
SHA512
e7a86c3f8aae6524c5d83fdb0dd79f686d45607d805242895198327a0bb88d9d0199455be22e0e55ea50b5ed93cf1423774770debf8bb673e0a7c43d2dfa2561
-
SSDEEP
3072:n3Fh1kdcIJa6A9T5Tfa6Js5XM2tHR+msi224LXR:3SdctTVa6JsdBfAB
Malware Config
Signatures
Files
-
58e9d6613a82522c1f17e39a83ecb34b7fcae7fa8f2c7e740bf4f5bf4d82ec70.exe windows x86
8cd02ff6b32707fc22526b3b4a9b3c8d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetMessageQueue
TrackPopupMenuEx
RegisterDeviceNotificationA
IsDialogMessageA
LoadCursorW
EndPaint
DrawTextA
FillRect
GetClientRect
LoadBitmapA
ToUnicode
RegisterHotKey
ClientToScreen
GetQueueStatus
ShowWindow
FindWindowExA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
CreateIcon
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
shell32
SHGetSpecialFolderLocation
ShellExecuteA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationA
ole32
SetConvertStg
IIDFromString
CoFileTimeToDosDateTime
CreateBindCtx
OleUninitialize
OleInitialize
CoTaskMemFree
StringFromIID
CoGetPSClsid
CoCreateInstance
CoCreateInstanceEx
advapi32
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
SetFilePointer
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetCPInfo
WriteConsoleInputW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualAlloc
CloseHandle
CreateThread
WritePrivateProfileSectionA
SignalObjectAndWait
GetCurrentDirectoryW
GlobalFix
GetDiskFreeSpaceW
GetLogicalDriveStringsA
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ