Static task
static1
Behavioral task
behavioral1
Sample
465a7d6387194785180294c3d1384795be633e8df143ecaf74718932667b6bf6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
465a7d6387194785180294c3d1384795be633e8df143ecaf74718932667b6bf6.exe
Resource
win10v2004-20221111-en
General
-
Target
465a7d6387194785180294c3d1384795be633e8df143ecaf74718932667b6bf6
-
Size
471KB
-
MD5
2abbcafc3aa5614bf51fbd84cabc788b
-
SHA1
58f98d236d74d3a1aec8099ae0248c06d192dd8f
-
SHA256
465a7d6387194785180294c3d1384795be633e8df143ecaf74718932667b6bf6
-
SHA512
6f430457d0c5d42290415fd7f5ac7047524c26da7472fc5b8dab0924bac4ae2b13ff37e23853823a1558f62e8dd7028c28c1797aab06c8ff7babce7c9be802bd
-
SSDEEP
12288:QQ2DRB6WTpprI4uWd0542/Uo/KV988LMQW5CIgtU2Z+LQGTS5lbu0J:t2FZplIjWd0zzKV9ZqoU2Z+0GTqbu
Malware Config
Signatures
Files
-
465a7d6387194785180294c3d1384795be633e8df143ecaf74718932667b6bf6.exe windows x86
340195e81638929008e5ce74854d7d7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExW
SHGetFileInfoA
DragQueryFile
user32
GetInputDesktop
RegisterClassA
CreateDesktopW
InSendMessage
EnumDisplayDevicesA
InflateRect
IntersectRect
RegisterClassExA
GetMenuItemInfoA
DdeAddData
GetUpdateRect
InsertMenuItemA
CreateWindowExW
EnumDesktopWindows
MessageBoxW
BeginDeferWindowPos
FindWindowW
TranslateMDISysAccel
IsDlgButtonChecked
MapVirtualKeyExA
EnumDisplayMonitors
ShowWindow
kernel32
WriteProfileStringA
CompareStringW
HeapCreate
OpenMutexA
QueryPerformanceCounter
MultiByteToWideChar
GetVersion
LocalUnlock
GetSystemTimeAsFileTime
SetLastError
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleInputA
GetStartupInfoA
lstrcmpi
LoadLibraryA
DeleteCriticalSection
CreateMutexA
LCMapStringA
GetComputerNameW
GetTimeZoneInformation
CompareStringA
FreeEnvironmentStringsW
TlsSetValue
VirtualFree
GetFileType
TlsFree
ExitProcess
InitializeCriticalSection
GetEnvironmentStrings
TlsGetValue
GetModuleFileNameA
GetCurrentThreadId
GetCommandLineA
GetSystemTime
InterlockedExchange
HeapDestroy
SetFilePointer
GetModuleHandleA
SetThreadContext
HeapFree
HeapValidate
GetLocalTime
GetStringTypeA
EnterCriticalSection
GetCurrentProcessId
LeaveCriticalSection
InterlockedIncrement
HeapSize
GetStringTypeW
LCMapStringW
VirtualAlloc
UnhandledExceptionFilter
RtlUnwind
InterlockedDecrement
lstrcatW
GetCurrentProcess
WriteFile
SetHandleCount
GetCurrentThread
GetFileSize
GetTickCount
TerminateProcess
GetCommandLineW
IsBadWritePtr
GetProcAddress
HeapAlloc
ReadFile
FreeEnvironmentStringsA
lstrlenA
FlushConsoleInputBuffer
lstrcmpA
GlobalDeleteAtom
GetLastError
VirtualQuery
HeapReAlloc
GetLocaleInfoW
GetStartupInfoW
WideCharToMultiByte
GetModuleFileNameW
CloseHandle
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStdHandle
comctl32
ImageList_DragLeave
ImageList_GetIconSize
InitCommonControlsEx
MakeDragList
_TrackMouseEvent
CreateMappedBitmap
ImageList_LoadImage
ImageList_Write
DrawStatusTextA
DrawStatusText
ImageList_Replace
Sections
.text Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ