Static task
static1
Behavioral task
behavioral1
Sample
5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5.exe
Resource
win10v2004-20220812-en
General
-
Target
5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5
-
Size
494KB
-
MD5
f58db47b591f43fadfa0e2a442648710
-
SHA1
ac002729c594a94476632b0e1f818500cba70090
-
SHA256
5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5
-
SHA512
e0366acf7d82417e77b0d5da3ad7031372001a3fd9040ba27020f7e37cdbc89db0614d354f2411b56d349c1ee1a1419c9ae8b86bb91095483692c8e68bb8e9ee
-
SSDEEP
12288:5jGnmWL1zVnTPnZAZL9a7wflRbGJ9zVz2Y:CVNOL9a7wfrS9zVz2Y
Malware Config
Signatures
Files
-
5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5.exe windows x86
5704b279b16112e97c7239f1900e0067
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetFlags
ImageList_Merge
CreateMappedBitmap
ImageList_BeginDrag
ImageList_Remove
GetEffectiveClientRect
ImageList_DragLeave
DrawStatusText
ImageList_DragMove
InitCommonControlsEx
CreateStatusWindowW
ImageList_AddMasked
ImageList_LoadImage
ImageList_LoadImageW
CreateToolbarEx
ImageList_GetImageInfo
CreateUpDownControl
ImageList_SetOverlayImage
gdi32
FloodFill
RectVisible
GetCharABCWidthsFloatA
StrokeAndFillPath
CreateRoundRectRgn
CreateDCW
kernel32
GetEnvironmentStrings
SetFilePointer
GetConsoleCP
RaiseException
GetComputerNameA
FlushFileBuffers
OutputDebugStringW
FreeEnvironmentStringsA
DebugBreak
CompareStringW
CloseHandle
GetLocaleInfoW
TlsGetValue
GetDateFormatA
VirtualFree
FreeLibrary
GetCurrentThreadId
IsValidCodePage
GetFileType
GetModuleHandleA
GetSystemDefaultLangID
GetTimeZoneInformation
WideCharToMultiByte
HeapCreate
CreateFileA
InterlockedIncrement
SetStdHandle
GetTimeFormatA
UnhandledExceptionFilter
SetLastError
FileTimeToSystemTime
lstrcpyW
LoadLibraryW
LCMapStringA
MultiByteToWideChar
HeapFree
IsDebuggerPresent
HeapReAlloc
VirtualAlloc
SetThreadLocale
TlsFree
ReadConsoleW
CreateMutexA
GetCPInfo
HeapAlloc
VirtualQuery
DeleteCriticalSection
GetProcessHeap
GlobalSize
EnumTimeFormatsA
GetProcAddress
SetHandleCount
GetProcessShutdownParameters
GetOEMCP
LeaveCriticalSection
GetACP
GetStdHandle
WriteConsoleW
InterlockedExchange
HeapDestroy
SetUnhandledExceptionFilter
ExitProcess
LCMapStringW
GetStringTypeW
GetStartupInfoA
FreeEnvironmentStringsW
FormatMessageW
RtlUnwind
InterlockedDecrement
HeapValidate
SetEnvironmentVariableA
GetTickCount
GetCurrentProcessId
IsBadReadPtr
SetConsoleCtrlHandler
GetEnvironmentStringsW
GetUserDefaultLCID
GetVersionExA
OpenMutexA
ReadFile
GetConsoleOutputCP
GetLocaleInfoA
TerminateProcess
GetStringTypeA
CompareStringA
LoadLibraryA
GetConsoleMode
IsValidLocale
lstrlenA
GetCurrentThread
InitializeCriticalSection
GetSystemTimeAsFileTime
GetModuleFileNameW
GetSystemDefaultLCID
WriteConsoleA
EnterCriticalSection
EnumSystemLocalesA
TlsSetValue
CreatePipe
TlsAlloc
WriteFile
UnlockFileEx
GetLastError
GetCommandLineA
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCommandLineW
GetCurrentProcess
OutputDebugStringA
comdlg32
ChooseFontW
ReplaceTextA
GetFileTitleW
ReplaceTextW
shell32
SHFileOperationA
SHGetSpecialFolderLocation
SHChangeNotify
SHGetDesktopFolder
user32
DdeInitializeA
MsgWaitForMultipleObjects
ShowWindow
FindWindowExW
RegisterClassExA
IsIconic
ShowCaret
DefWindowProcW
SetCaretBlinkTime
MapVirtualKeyW
RegisterClassA
DestroyWindow
SetProcessDefaultLayout
GetMenuCheckMarkDimensions
ShowWindowAsync
GetAltTabInfo
OpenClipboard
SetWindowPlacement
IsDialogMessageA
SetMenuItemInfoW
wvsprintfA
CreateWindowExW
MessageBoxW
OpenInputDesktop
Sections
.text Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ