Static task
static1
Behavioral task
behavioral1
Sample
5f333c32808c7c5822b80f3d6af4c880bcd01ad69658d5781319b4fa9866fda0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f333c32808c7c5822b80f3d6af4c880bcd01ad69658d5781319b4fa9866fda0.exe
Resource
win10v2004-20220812-en
General
-
Target
5f333c32808c7c5822b80f3d6af4c880bcd01ad69658d5781319b4fa9866fda0
-
Size
184KB
-
MD5
32742164d08e3569758c2a43503d19a6
-
SHA1
732049ef4b3f1e132e94bc9e6b987b0760206528
-
SHA256
5f333c32808c7c5822b80f3d6af4c880bcd01ad69658d5781319b4fa9866fda0
-
SHA512
b5b1e5d8ed4574b93d2d0e88ce543ddf2832130d52de8ad3f4fad7530a40e2691d7b1ff4c599d71160d6dd9b2cb66b93692745481305512180b3e18b910683a6
-
SSDEEP
3072:gRMJIfR/jN3Odo3ixoLflWJpvAfbsn0cNSjihyRJr177Q0DA1mjIr5Y:gRMUp9yEGSa0c0iM177GG
Malware Config
Signatures
Files
-
5f333c32808c7c5822b80f3d6af4c880bcd01ad69658d5781319b4fa9866fda0.exe windows x86
c8c535d4401c47a132ec177bf87fee4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetComputerNameA
ExitProcess
ReleaseMutex
CreateMutexA
SetCurrentDirectoryA
GetCurrentDirectoryA
SystemTimeToFileTime
GetDriveTypeA
GetWindowsDirectoryA
GetSystemTime
GetFileInformationByHandle
FindClose
FindFirstFileA
IsBadReadPtr
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
FindNextFileA
Sleep
LocalFree
GetStringTypeA
GetStdHandle
CreateDirectoryA
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcess
TerminateProcess
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
HeapCreate
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
HeapReAlloc
SetFileAttributesA
SetFileTime
ExitThread
GetTickCount
CreateThread
SuspendThread
ResumeThread
GetLastError
GetLocalTime
GetFullPathNameA
CreateFileA
SetFilePointer
WriteFile
CloseHandle
IsDBCSLeadByte
GetFileAttributesA
GetVersion
LoadLibraryA
GetProcAddress
GetFileType
FreeLibrary
GetStringTypeW
user32
SetDlgItemTextA
GetDlgItem
BringWindowToTop
SendDlgItemMessageA
GetWindowRect
AttachThreadInput
SystemParametersInfoA
GetWindowThreadProcessId
GetForegroundWindow
SetCursor
SetWindowTextA
SetWindowWord
GetWindowWord
MoveWindow
PeekMessageA
CallWindowProcA
GetClientRect
CreateDialogParamA
DialogBoxParamA
IsDialogMessageA
EndDialog
RegisterWindowMessageA
PostQuitMessage
GetMenuItemID
GetSubMenu
GetDlgItemTextA
InsertMenuA
MessageBeep
FlashWindow
SetWindowPlacement
SetForegroundWindow
IsWindowEnabled
IsWindowVisible
GetMessageA
DispatchMessageA
TranslateMessage
GetParent
GetWindowTextA
ShowWindow
LoadMenuA
CreatePopupMenu
CreateMenu
GetMenuItemCount
TrackPopupMenu
DestroyMenu
GetWindowPlacement
GetSystemMetrics
LoadIconA
GetWindow
TranslateAcceleratorA
UpdateWindow
IsWindow
DestroyWindow
CreateWindowExA
RegisterHotKey
GetMessagePos
UnregisterHotKey
SetClassLongA
DeleteMenu
DefWindowProcA
RegisterClassA
FindWindowA
LoadCursorA
LoadAcceleratorsA
KillTimer
MessageBoxA
SetTimer
SetCapture
GetCursorPos
SetFocus
SetWindowLongA
GetWindowLongA
EnableWindow
AppendMenuA
GetSystemMenu
PostMessageA
InvalidateRgn
GetAsyncKeyState
IsDlgButtonChecked
SendMessageA
ModifyMenuA
GetMenuStringA
wsprintfA
ReleaseCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
ScreenToClient
SetActiveWindow
gdi32
GetObjectA
DeleteObject
CreateFontIndirectA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
advapi32
RegDeleteKeyA
RegEnumValueA
RegEnumKeyExA
GetUserNameA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
shell32
Shell_NotifyIconA
ExtractIconA
ShellExecuteExA
SHGetMalloc
SHBrowseForFolder
SHGetPathFromIDList
ShellExecuteA
DragQueryFileA
DragFinish
ole32
CoInitialize
CoUninitialize
winmm
PlaySoundA
comctl32
ImageList_Destroy
ImageList_Create
ord17
ImageList_ReplaceIcon
wsock32
ioctlsocket
WSAGetLastError
sendto
WSAAsyncSelect
WSACleanup
WSAStartup
socket
bind
inet_ntoa
connect
listen
htons
gethostname
gethostbyname
closesocket
recv
select
send
ntohl
inet_addr
accept
setsockopt
recvfrom
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE