Static task
static1
Behavioral task
behavioral1
Sample
5232f394e2b5e62364e6339a4d1763f7934f96b01f8e2f516ec3588fcf225e4b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5232f394e2b5e62364e6339a4d1763f7934f96b01f8e2f516ec3588fcf225e4b.exe
Resource
win10v2004-20220901-en
General
-
Target
5232f394e2b5e62364e6339a4d1763f7934f96b01f8e2f516ec3588fcf225e4b
-
Size
111KB
-
MD5
a1df127e145d62e19cf8f8b3d87ebb2c
-
SHA1
9e3b7964d1db44687a7b6ba322e601fd1470597a
-
SHA256
5232f394e2b5e62364e6339a4d1763f7934f96b01f8e2f516ec3588fcf225e4b
-
SHA512
4ccfd0d9006fb988d643533efe002a34282c82b1ccc4fd85a3035c2c84b4163aa006093c5c0e07d277f7fc962b7765d57ef10fc258fb06b84c8606fabb787eea
-
SSDEEP
3072:jNsClHcZe2yaavEtAtFFFFFFFlJfZxUf+jF:BsEJRH
Malware Config
Signatures
Files
-
5232f394e2b5e62364e6339a4d1763f7934f96b01f8e2f516ec3588fcf225e4b.exe windows x86
d5987ac04d0c695f3e65e069533e68ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetFileInfoA
DragFinish
DragAcceptFiles
DragQueryFileA
gdi32
SetTextColor
SetBkMode
CreateFontIndirectA
GetDeviceCaps
DeleteObject
SelectObject
opengl32
glRasterPos3sv
glRectd
wglSwapLayerBuffers
glLoadMatrixd
glEvalCoord1fv
glColor3ubv
glGetPixelMapfv
glTexParameteri
comctl32
InitCommonControlsEx
ImageList_Destroy
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
kernel32
GetConsoleOutputCP
HeapSize
GetLocaleInfoA
WriteConsoleW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
GetSystemTimeAsFileTime
DeleteFiber
SetCommBreak
GetConsoleScreenBufferInfo
GetSystemWindowsDirectoryA
GetUserDefaultUILanguage
EnumTimeFormatsW
FillConsoleOutputCharacterW
OpenFileMappingW
CloseHandle
CreateFileA
ExitProcess
GetFileType
GetSystemTime
GetFileSize
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetFilePointer
WriteFile
GetCommandLineA
GetLastError
GetModuleHandleA
MultiByteToWideChar
TlsGetValue
TlsSetValue
WideCharToMultiByte
LocalAlloc
LocalFree
VirtualAlloc
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
GetModuleHandleW
Sleep
GetProcAddress
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ