Static task
static1
Behavioral task
behavioral1
Sample
53f184a7bdf2b67148454207b6eb463cd01f0b4b57ed93f9b7792d1e7672b382.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
53f184a7bdf2b67148454207b6eb463cd01f0b4b57ed93f9b7792d1e7672b382.exe
Resource
win10v2004-20221111-en
General
-
Target
53f184a7bdf2b67148454207b6eb463cd01f0b4b57ed93f9b7792d1e7672b382
-
Size
238KB
-
MD5
be009e5259b220643b1299ee87924c48
-
SHA1
969fc0b582688127aa8cace9307dafb71f997640
-
SHA256
53f184a7bdf2b67148454207b6eb463cd01f0b4b57ed93f9b7792d1e7672b382
-
SHA512
b4b80629f80cd8d17f52132d5f77854d1399cd5a9e911a101d9d17258ff590e21c900a97efce2e3c6be40796aef1cc91ad793a5611744e77b79bacb0a8eff102
-
SSDEEP
3072:B5Gqpg+TLvyAGu+drHkCsyAAg0Fu1Y9tHhJXAL/kEtLCuRTLN/Bact8vfWgF9PNn:B11XCsrAOYEtBTL96aq920
Malware Config
Signatures
Files
-
53f184a7bdf2b67148454207b6eb463cd01f0b4b57ed93f9b7792d1e7672b382.exe windows x86
19027a411546fa796a86b5cd40ff3f76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowRgn
ReleaseDC
GetWindowDC
GetTopWindow
shell32
ShellExecuteA
advapi32
RegCreateKeyExA
LookupPrivilegeValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
OpenProcessToken
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
AdjustTokenPrivileges
gdi32
GetDIBits
GetObjectA
CreateCompatibleBitmap
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetStockObject
CreateFontIndirectA
CreateRectRgn
CombineRgn
SelectObject
StretchBlt
BitBlt
GetBkColor
CreateCompatibleDC
GetDeviceCaps
comctl32
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_SetIconSize
_TrackMouseEvent
ImageList_GetDragImage
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
shlwapi
PathFindExtensionA
PathFindFileNameA
kernel32
SetStdHandle
CreateFileA
InterlockedDecrement
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
VirtualAlloc
SetFilePointerEx
GlobalAddAtomW
LocalHandle
LockResource
lstrcpynA
CopyFileExA
lstrcpyA
InterlockedIncrement
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
HeapAlloc
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
HeapReAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
RaiseException
GetLocaleInfoW
HeapSize
GetConsoleCP
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ