Static task
static1
Behavioral task
behavioral1
Sample
a54d8d590861c05cbb9e2af656e55e0ddce30767eeeb9937da0e8eb7a69251d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a54d8d590861c05cbb9e2af656e55e0ddce30767eeeb9937da0e8eb7a69251d3.exe
Resource
win10v2004-20220812-en
General
-
Target
a54d8d590861c05cbb9e2af656e55e0ddce30767eeeb9937da0e8eb7a69251d3
-
Size
93KB
-
MD5
1f1149de6a15abb801733deecc01ce1b
-
SHA1
7e1ad03913e72ecbca74951d5624b0587a25ca65
-
SHA256
a54d8d590861c05cbb9e2af656e55e0ddce30767eeeb9937da0e8eb7a69251d3
-
SHA512
68a3c616b42ec41ae363faaa6763828e13cefcb5b05f415c12f81201f4ad7fcfd7cb4e49aa1567e43f1b2edf8c8accac02f98d99e8daa311fbde7b6c243b3c80
-
SSDEEP
1536:7cJzASS6h9uxOR4SSTWKdsyOqmZoOs1QI7ZXkmN+qOdp0cdFMFVzuY:7cJzzS6MtWMmqGvsKABNbcdGFVzuY
Malware Config
Signatures
Files
-
a54d8d590861c05cbb9e2af656e55e0ddce30767eeeb9937da0e8eb7a69251d3.exe windows x86
a28733685f9756f0ce0fc4fdfa263284
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
wininet
InternetOpenA
InternetOpenUrlA
InternetCanonicalizeUrlA
DeleteUrlCacheEntry
gdiplus
GdipDrawImageRectI
GdipGetImageWidth
GdipCreateFromHDC
GdipCloneImage
GdipGetImageHeight
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipAlloc
GdipFree
GdiplusStartup
GdipDeleteGraphics
GdipDisposeImage
uxtheme
IsThemeActive
CloseThemeData
OpenThemeData
comctl32
InitCommonControlsEx
kernel32
GetStringTypeW
GetConsoleMode
FreeEnvironmentStringsW
SetFilePointer
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapSize
GetLastError
lstrlenA
LocalFree
FormatMessageA
WideCharToMultiByte
LockResource
LoadResource
FindResourceA
CreateMutexA
VerifyVersionInfoA
VerSetConditionMask
GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
CloseHandle
GetModuleFileNameA
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
Sleep
GetVersion
TerminateProcess
GetExitCodeProcess
CreateProcessA
MultiByteToWideChar
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
LCMapStringW
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
GetEnvironmentStringsW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
GetCurrentThreadId
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
DecodePointer
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
RtlUnwind
QueryPerformanceCounter
LoadLibraryW
SetStdHandle
FlushFileBuffers
HeapReAlloc
WriteConsoleW
CreateFileW
GetTickCount
user32
DrawTextA
DestroyWindow
CreateDialogParamA
SetWindowTextA
MoveWindow
SetDlgItemTextA
SetForegroundWindow
SetFocus
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetWindowRect
SystemParametersInfoA
GetSystemMetrics
GetWindowLongA
SetWindowLongA
MsgWaitForMultipleObjects
LoadCursorA
SetCursor
IsWindowVisible
EndPaint
ShowWindow
LoadIconA
KillTimer
SetTimer
IsWindow
GetDC
GetClientRect
FillRect
SendMessageA
InvalidateRect
UpdateWindow
ReleaseDC
ExitWindowsEx
CharNextA
LoadStringA
MessageBoxA
CharPrevA
GetDlgItem
BeginPaint
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkMode
BitBlt
DeleteObject
DeleteDC
CreateFontIndirectA
CreateSolidBrush
advapi32
AllocateAndInitializeSid
FreeSid
shell32
Shell_NotifyIconA
ole32
CreateStreamOnHGlobal
netapi32
Netbios
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ