Static task
static1
Behavioral task
behavioral1
Sample
506ac65c9f34f90eb3717bbac0dcbb06b647dca8472296bc97e25378b993bd6a.exe
Resource
win7-20220812-en
General
-
Target
506ac65c9f34f90eb3717bbac0dcbb06b647dca8472296bc97e25378b993bd6a
-
Size
208KB
-
MD5
defb4cda11dd54702eb9d02149fb1f67
-
SHA1
4d4720064ef3a0b0f871bde8becd7148823aa210
-
SHA256
506ac65c9f34f90eb3717bbac0dcbb06b647dca8472296bc97e25378b993bd6a
-
SHA512
e3b687865139f038952b22b5f262f72e66bb1df2a32665f0fef4f8419cb4fa0279644c3d3d34754bb72691408e3a5951673951c155ffa2917dd18ce230b37c35
-
SSDEEP
3072:oU+8ZmPF6eFvOzie6NQHbO3wo+9qVYUCj4ra:Z+qFUNA473CjZ
Malware Config
Signatures
Files
-
506ac65c9f34f90eb3717bbac0dcbb06b647dca8472296bc97e25378b993bd6a.exe windows x86
1e6be9e0e08cf4549123fb3b31b050ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetStringTypeW
LCMapStringW
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
Sleep
RtlUnwind
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
EncodePointer
HeapCreate
GetModuleFileNameW
WriteFile
DecodePointer
ExitProcess
GetModuleHandleW
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetCurrentProcessId
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
LoadLibraryA
GetProcessHeaps
GetProcAddress
GetLastError
GetStdHandle
FillConsoleOutputCharacterA
MultiByteToWideChar
lstrcatA
SetConsoleCursorPosition
CreateEventA
WaitForSingleObject
HeapAlloc
lstrlenA
TlsGetValue
user32
GetClassLongA
CopyRect
CloseClipboard
SetCursor
ScreenToClient
GetWindowRect
GetClassNameA
SetDlgItemTextA
DrawFrameControl
SendDlgItemMessageA
FillRect
DrawTextA
DrawIconEx
LoadStringA
CopyImage
IsWindowEnabled
wsprintfA
GetClientRect
GetWindowTextLengthA
SendMessageA
BeginPaint
PtInRect
GetDC
DrawFocusRect
InflateRect
OffsetRect
GetWindowTextA
SetRect
SetWindowLongA
GetWindowLongA
ReleaseDC
EmptyClipboard
IsWindowUnicode
GetDlgItem
EndDialog
DefWindowProcA
GetCursorPos
FrameRect
IsWindow
OpenClipboard
IsWindowVisible
SetWindowTextA
LoadImageA
MapWindowPoints
SetClipboardData
gdi32
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
FillRgn
GetDeviceCaps
CreateSolidBrush
PatBlt
GetLayout
BitBlt
MoveToEx
CreatePolygonRgn
DeleteDC
SetTextColor
GetStockObject
LineTo
oleaut32
SysFreeString
SysAllocStringLen
SysStringLen
comctl32
ord17
ord413
setupapi
SetupDiEnumDeviceInfo
uxtheme
CloseThemeData
DrawThemeBackground
OpenThemeData
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ