Static task
static1
Behavioral task
behavioral1
Sample
57aa211ed4969f5e80ce3f10c6811e6a96879a6e36898bfcf72cf1ca0c88da83.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
57aa211ed4969f5e80ce3f10c6811e6a96879a6e36898bfcf72cf1ca0c88da83.exe
Resource
win10v2004-20221111-en
General
-
Target
57aa211ed4969f5e80ce3f10c6811e6a96879a6e36898bfcf72cf1ca0c88da83
-
Size
636KB
-
MD5
39ff65bc22a568a60dd32515fad9b431
-
SHA1
5e562034b7bccd9f8fc4e85ae362af555ecdcacb
-
SHA256
57aa211ed4969f5e80ce3f10c6811e6a96879a6e36898bfcf72cf1ca0c88da83
-
SHA512
6f49a907349edb9aa9fa3e91b50fba111ae1862c982107b23870f5b770ec244dec8118547100e62280f2ff0abf8bba066e78d73ad879994a5473e9e0db2fc522
-
SSDEEP
12288:GnIoknusieM4lSwpxndep/PPmbkMXgF90PJE1IjoWgG2mxcw:GjLDeM4oMJ4vm/JEecW1/
Malware Config
Signatures
Files
-
57aa211ed4969f5e80ce3f10c6811e6a96879a6e36898bfcf72cf1ca0c88da83.exe windows x86
a39c73ba394c21edb88d6d7e49ff909d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
TlsGetValue
HeapCreate
GetSystemTimeAsFileTime
CreateMutexA
CompareStringW
VirtualFree
EnterCriticalSection
InterlockedExchange
ExitProcess
WideCharToMultiByte
GetCurrentThread
TerminateProcess
SetFilePointer
FreeEnvironmentStringsW
GetStartupInfoA
CloseHandle
GetEnvironmentStrings
InitializeCriticalSection
GetOEMCP
LCMapStringW
FatalAppExitA
CompareStringA
LCMapStringA
SetStdHandle
GetACP
LoadLibraryA
UnhandledExceptionFilter
GetLocalTime
GetCurrentProcessId
GetStringTypeW
QueryPerformanceCounter
VirtualQuery
RtlUnwind
GetModuleHandleA
GetSystemTime
HeapReAlloc
TlsAlloc
GetLastError
DeleteCriticalSection
ReadFile
GetCurrentProcess
LeaveCriticalSection
SetLastError
InterlockedDecrement
WriteFile
SetHandleCount
GetProcAddress
InterlockedIncrement
FlushFileBuffers
GetStringTypeA
VirtualAlloc
SetEnvironmentVariableA
GetTimeZoneInformation
HeapAlloc
FreeEnvironmentStringsA
HeapFree
GetCurrentThreadId
GetModuleFileNameA
GetCommandLineA
GetEnvironmentStringsW
GetVersion
GetStdHandle
GetCPInfo
GetTickCount
HeapDestroy
TlsFree
TlsSetValue
GetFileType
IsBadWritePtr
winmm
waveInGetNumDevs
mixerGetLineControlsA
waveOutWrite
mixerGetLineInfoA
waveOutPrepareHeader
mixerGetControlDetailsA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderPathA
ord155
SHBrowseForFolderA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetMalloc
advapi32
SetSecurityDescriptorDacl
RegQueryValueExA
ReportEventA
RegOpenKeyExA
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
comdlg32
GetOpenFileNameA
PageSetupDlgA
user32
GetIconInfo
GetActiveWindow
LoadMenuA
InvalidateRgn
SetParent
LoadCursorA
GetWindowPlacement
SetMenu
SetWindowRgn
UnpackDDElParam
DestroyWindow
SetWindowContextHelpId
GetClassLongA
GetNextDlgGroupItem
SetMenuItemInfoA
DrawEdge
GetMenuItemInfoA
SystemParametersInfoA
RegisterClassA
SetTimer
GetWindowRect
GetFocus
DrawMenuBar
ShowWindow
SetCursor
GetDlgItem
MapWindowPoints
SetWindowLongA
GetMenuStringA
CreatePopupMenu
ScreenToClient
DrawFocusRect
FillRect
ExitWindowsEx
IntersectRect
PostThreadMessageA
RegisterWindowMessageA
GetMessageA
PeekMessageA
SetClipboardData
GetParent
RegisterClassExA
GetWindowTextA
MoveWindow
DefWindowProcA
IsWindowEnabled
DestroyIcon
FindWindowExA
IsDlgButtonChecked
InvalidateRect
UnionRect
SetScrollRange
SetScrollInfo
ClientToScreen
MessageBoxA
CreateWindowExA
GetNextDlgTabItem
LockWindowUpdate
GetTopWindow
DrawTextA
PtInRect
wsprintfA
SetWindowTextA
GetKeyState
MapDialogRect
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 452KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ