Static task
static1
Behavioral task
behavioral1
Sample
17aad52c14c79b097638e53fc14aa70b20579881aaa53cbb90e31895bb7c2b0c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
17aad52c14c79b097638e53fc14aa70b20579881aaa53cbb90e31895bb7c2b0c.exe
Resource
win10v2004-20221111-en
General
-
Target
17aad52c14c79b097638e53fc14aa70b20579881aaa53cbb90e31895bb7c2b0c
-
Size
135KB
-
MD5
009d54e7537179d7a653fa027eda29e9
-
SHA1
7dd150578807a7367dc9d4c8926c4138b3280e2d
-
SHA256
17aad52c14c79b097638e53fc14aa70b20579881aaa53cbb90e31895bb7c2b0c
-
SHA512
687c5afe3d130ad51a16f4556bc2baac45664888e6c89715c20a93e327a780376bc515924662105fba6e6e161ee14ba5b700459afba118427ac11e942bf7769b
-
SSDEEP
3072:1PRyBDYErqzdDJZ+/lzyVAvfj9r6CSsWDt:SYRTylIEfjUQc
Malware Config
Signatures
Files
-
17aad52c14c79b097638e53fc14aa70b20579881aaa53cbb90e31895bb7c2b0c.exe windows x86
fcba7a2fc73e7a747ba09d89276819a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WinHelpA
WindowFromPoint
wsprintfA
UpdateWindow
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InsertMenuA
IntersectRect
InvalidateRect
IsDlgButtonChecked
IsIconic
IsWindow
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
MapDialogRect
MapVirtualKeyA
MessageBoxA
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
RedrawWindow
RegisterClassA
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowCaret
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnregisterClassA
wsprintfW
comdlg32
ChooseFontA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteA
DragQueryFileA
DragFinish
DragAcceptFiles
ole32
CoCreateInstance
CoInitialize
CoUninitialize
advapi32
RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyA
gdi32
ExtTextOutA
ExtTextOutW
GetClipBox
GetDCOrgEx
GetNearestColor
GetObjectA
GetObjectType
GetStockObject
GetTextMetricsA
ExcludeClipRect
LineTo
MoveToEx
RemoveFontResourceA
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetTextAlign
SetTextColor
EnumFontFamiliesA
DeleteObject
CreateSolidBrush
CreatePen
CreateFontIndirectA
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
AddFontResourceA
IntersectClipRect
DeleteDC
opengl32
glFogi
glNormal3dv
glColorMask
glPolygonMode
wglUseFontOutlinesW
glGetPixelMapuiv
glPixelMapuiv
kernel32
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetTickCount
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
Sleep
GetModuleHandleW
GetModuleHandleA
GetProcAddress
RtlUnwind
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RaiseException
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
HeapSize
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetFileType
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
GetCommandLineW
WriteProfileStringA
GetSystemWindowsDirectoryW
SetFilePointerEx
SetThreadLocale
SetComputerNameW
FatalAppExitA
GetSystemTimeAsFileTime
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ