Static task
static1
Behavioral task
behavioral1
Sample
d5a21b817feeea28edc7b445c17954ea29f788a081cbb65fbe92cfc181b2ce8a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5a21b817feeea28edc7b445c17954ea29f788a081cbb65fbe92cfc181b2ce8a.exe
Resource
win10v2004-20220812-en
General
-
Target
d5a21b817feeea28edc7b445c17954ea29f788a081cbb65fbe92cfc181b2ce8a
-
Size
260KB
-
MD5
696345396b96094e59f57ed6722b33a2
-
SHA1
208b56853068fc6decb4aee85afb01cd0b5c6f94
-
SHA256
d5a21b817feeea28edc7b445c17954ea29f788a081cbb65fbe92cfc181b2ce8a
-
SHA512
cfc252aebf9db0b4d12a48c12887362996df821448b7a95aca09bd25d4b3b6d5ace68c037077b4791c0cd69decd4ee63070bd0330469649695d0aef38901d52c
-
SSDEEP
6144:euN91OGvBbwl3GB0e/BCO+5X4CXc3iKs:xj1OGJ63Gr/MLX4Ic3W
Malware Config
Signatures
Files
-
d5a21b817feeea28edc7b445c17954ea29f788a081cbb65fbe92cfc181b2ce8a.exe windows x86
c639aa617292580d0f1704c16431691c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WinHelpA
DdeReconnect
RegisterClipboardFormatA
PackDDElParam
GetMenuDefaultItem
OemToCharW
DrawTextExA
CharToOemBuffA
FindWindowExA
RegisterClassExA
MapVirtualKeyExW
IsWindowVisible
IsCharLowerA
RegisterClassA
DefWindowProcW
CreateWindowExA
GetWindowTextLengthW
PtInRect
EnumClipboardFormats
InternalGetWindowText
OemToCharBuffA
GetMenuItemInfoA
GetMenuStringW
GetSysColorBrush
MessageBoxA
TranslateAccelerator
DestroyCursor
EnumDisplayDevicesW
MapVirtualKeyW
GetCaretPos
HideCaret
GetClassInfoExA
GetNextDlgGroupItem
SetWindowTextW
DdeSetQualityOfService
ShowWindow
EnumDisplaySettingsExA
SetDlgItemInt
DlgDirListA
GetInputState
MapVirtualKeyA
CreateAcceleratorTableA
LoadBitmapW
DestroyWindow
FindWindowExW
DefMDIChildProcA
GetComboBoxInfo
GetClassInfoA
kernel32
FlushFileBuffers
HeapDestroy
DeleteFileW
RtlUnwind
HeapReAlloc
GetStringTypeW
HeapCreate
GetNamedPipeHandleStateA
HeapFree
InterlockedExchange
LoadLibraryA
GetCPInfo
GetCurrencyFormatA
ExitProcess
CreateFileW
GetModuleFileNameW
GetFileType
VirtualFree
InterlockedIncrement
GetEnvironmentStrings
IsDebuggerPresent
GetTimeZoneInformation
SetEnvironmentVariableA
CreateWaitableTimerW
GetShortPathNameW
GetCommandLineW
SetComputerNameA
GetLocalTime
GetConsoleCursorInfo
GetCurrentProcessId
MultiByteToWideChar
GetLastError
GetSystemTime
GetEnvironmentStringsW
CreateMutexA
GetModuleFileNameA
GetEnvironmentVariableW
OpenFileMappingA
ReadFile
QueryPerformanceCounter
TlsSetValue
SetFilePointer
EnumSystemCodePagesW
CloseHandle
DeleteCriticalSection
WriteFile
IsBadWritePtr
TlsFree
GetModuleHandleW
WideCharToMultiByte
GetStringTypeA
SetLastError
TerminateProcess
GetCommandLineA
GetCurrentProcess
EnterCriticalSection
SetStdHandle
GetVersion
GetPrivateProfileSectionA
GetStartupInfoA
LeaveCriticalSection
SetHandleCount
WriteConsoleW
GetProcAddress
CompareStringA
MapViewOfFileEx
GetSystemTimeAsFileTime
SetPriorityClass
VirtualAlloc
GetStdHandle
OpenMutexA
ExitThread
lstrcpynA
LCMapStringW
InitializeCriticalSection
UnhandledExceptionFilter
GetTempFileNameW
GetCurrentDirectoryA
GetTickCount
GetStartupInfoW
GetSystemTimeAdjustment
InterlockedDecrement
CreateFileMappingW
CompareStringW
GetPrivateProfileSectionW
GetConsoleScreenBufferInfo
GetCurrentThread
VirtualQuery
GetCurrentThreadId
GetModuleHandleA
HeapAlloc
TlsAlloc
TransmitCommChar
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringA
GetAtomNameA
TlsGetValue
wininet
InternetTimeFromSystemTimeW
HttpQueryInfoA
SetUrlCacheEntryGroupA
RetrieveUrlCacheEntryFileA
SetUrlCacheConfigInfoA
gdi32
EnumFontFamiliesExA
GetColorAdjustment
GetObjectW
DeleteDC
SetTextAlign
PaintRgn
GetDeviceCaps
CreateDCW
SelectObject
comctl32
InitCommonControlsEx
CreatePropertySheetPageA
CreateStatusWindow
ImageList_GetIconSize
ImageList_EndDrag
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ