Static task
static1
Behavioral task
behavioral1
Sample
d1049482df1d0d0cfe84f00eb710ab14009afb7a1d496ee664b7e24f312805ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1049482df1d0d0cfe84f00eb710ab14009afb7a1d496ee664b7e24f312805ae.exe
Resource
win10v2004-20220812-en
General
-
Target
d1049482df1d0d0cfe84f00eb710ab14009afb7a1d496ee664b7e24f312805ae
-
Size
488KB
-
MD5
d3d013aaa07c6217fda7a8a139c42b60
-
SHA1
c2255e187fc08109ee3da450bba1e176b7583384
-
SHA256
d1049482df1d0d0cfe84f00eb710ab14009afb7a1d496ee664b7e24f312805ae
-
SHA512
77b508f7b7504a15e2892bd956958d63ea81c601f923b23de89db0adbcac35b5bc5cd460592cb5c14ab8e122c3c60c49dfa08aeff39e6772a5de28f0651d4e69
-
SSDEEP
12288:M5GcFV5PDTOLQtJ+5tPD9HQdjFhkPcykVbI:MAELTOEtJWpwhmq
Malware Config
Signatures
Files
-
d1049482df1d0d0cfe84f00eb710ab14009afb7a1d496ee664b7e24f312805ae.exe windows x86
ace7ba5d002e8d3c91efb802a0f4ace1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
HeapReAlloc
GetStringTypeW
LCMapStringW
HeapSize
RtlUnwind
SetStdHandle
WriteConsoleW
LoadLibraryW
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
CloseHandle
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapCreate
GetModuleFileNameW
WriteFile
GetCurrentProcessId
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
LoadLibraryA
GetProcessHeaps
GetProcAddress
GetLastError
GetStdHandle
MultiByteToWideChar
SetConsoleCursorPosition
WideCharToMultiByte
InterlockedDecrement
HeapAlloc
ExitProcess
GetModuleHandleW
HeapFree
EncodePointer
DecodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetStartupInfoW
TlsAlloc
FillConsoleOutputCharacterA
HeapSetInformation
GetCommandLineA
user32
SetClipboardData
LoadImageA
SetWindowTextA
OpenClipboard
IsWindow
CopyRect
DefWindowProcA
EndDialog
GetDlgItem
EmptyClipboard
EndPaint
SetCursor
CloseClipboard
GetWindowRect
FillRect
KillTimer
DrawTextA
DrawIconEx
CopyImage
LoadBitmapA
GetClientRect
GetWindowTextLengthA
SendMessageA
BeginPaint
GetDC
SetRect
SetWindowLongA
GetWindowLongA
ReleaseDC
gdi32
MoveToEx
BitBlt
GetLayout
PatBlt
LineTo
SetTextColor
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateDCW
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
FillRgn
SaveDC
CreateRectRgn
GetPixel
GetStockObject
RestoreDC
CreateSolidBrush
CreatePolygonRgn
winmm
midiStreamOpen
version
GetFileVersionInfoW
comctl32
ord17
gdiplus
GdiplusShutdown
GdiplusStartup
uxtheme
CloseThemeData
DrawThemeBackground
GetWindowTheme
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 411KB - Virtual size: 410KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ