Static task
static1
Behavioral task
behavioral1
Sample
5e7eaceadb9601855a0576a06551b2038e153cccfbaeef5d156d9ead414d6b71.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5e7eaceadb9601855a0576a06551b2038e153cccfbaeef5d156d9ead414d6b71.exe
Resource
win10v2004-20220812-en
General
-
Target
5e7eaceadb9601855a0576a06551b2038e153cccfbaeef5d156d9ead414d6b71
-
Size
1020KB
-
MD5
1c0579e738145fe3edd94f6539e4ba00
-
SHA1
dc4bd6ed45fa42a3fec66668ca65ace1112bfc9b
-
SHA256
5e7eaceadb9601855a0576a06551b2038e153cccfbaeef5d156d9ead414d6b71
-
SHA512
70878e3338d84e7f6a02c376e69e620e2c4b27f02cf39ccfb1ba0aaab79441d5254d8136c4c360453470170700e84620adfc7e671160c15dc9e06b13e8268fca
-
SSDEEP
24576:MWtf8W5nP6MAnZ2p4VkyveFk/ubvZsrsf85yEXOuv:xj4V0ravOu
Malware Config
Signatures
Files
-
5e7eaceadb9601855a0576a06551b2038e153cccfbaeef5d156d9ead414d6b71.exe windows x86
b3a057a9ed0328d6ed13a7d122a465b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
IsZoomed
DefFrameProcA
GetSystemMetrics
DestroyMenu
PostQuitMessage
IsWindow
GetKeyState
PostMessageA
BeginPaint
EndPaint
GetClientRect
MoveWindow
CreateWindowExA
GetDC
SendMessageA
ReleaseDC
GetMenuItemCount
GetSubMenu
InvalidateRect
UpdateWindow
SetWindowPos
ShowWindow
CallNextHookEx
GetWindowRect
FindWindowExA
GetWindowTextLengthA
MapWindowPoints
GetWindowTextA
SetWindowTextA
SetWindowsHookExA
MessageBoxA
UnhookWindowsHookEx
WaitMessage
GetWindowLongA
GetMessageA
TranslateMDISysAccel
TranslateMessage
DispatchMessageA
EnableMenuItem
DrawMenuBar
PtInRect
GetSystemMenu
AppendMenuA
SetMenu
IsIconic
HideCaret
ShowCaret
ScrollDC
InvalidateRgn
LoadCursorA
DeleteMenu
wsprintfA
DestroyCaret
CreateCaret
AttachThreadInput
SetCaretPos
PeekMessageA
LoadIconA
RegisterClassA
CreateMenu
OemToCharA
GetWindow
GetMenuState
GetMenuItemID
SetMenuItemInfoA
InsertMenuA
CheckMenuItem
ModifyMenuA
GetUpdateRect
IsDialogMessageA
CreateDialogIndirectParamA
IsRectEmpty
IntersectRect
GetFocus
DestroyWindow
EnableWindow
SetDoubleClickTime
IsClipboardFormatAvailable
ScrollWindow
GetMenu
SetCapture
SetCursor
GetScrollPos
SetScrollRange
SetScrollPos
RedrawWindow
SetWindowLongA
SetClipboardData
EmptyClipboard
DefWindowProcA
WinHelpA
ReleaseCapture
DefMDIChildProcA
CloseClipboard
GetClipboardData
OpenClipboard
MessageBeep
SetFocus
IsWindowVisible
GetMenuItemInfoA
gdi32
StartDocA
GetSystemPaletteEntries
GetDIBits
DPtoLP
GetMapMode
AbortDoc
StretchDIBits
EndDoc
EndPage
StartPage
SetAbortProc
GetPixel
SetStretchBltMode
BitBlt
CreateBitmapIndirect
GetDeviceCaps
TextOutA
SetPixel
Ellipse
Polygon
Arc
Pie
PolyBezier
PolyBezierTo
CreatePatternBrush
GetPaletteEntries
SetPaletteEntries
CreateCompatibleBitmap
GetNearestColor
RealizePalette
SelectPalette
CreatePalette
GetStockObject
SetViewportExtEx
SetWindowExtEx
SetMapMode
SelectClipRgn
CreateRectRgn
Rectangle
ExtTextOutA
GetTextMetricsA
SetBkColor
SetTextColor
PatBlt
CreateSolidBrush
CreateFontIndirectA
EnumFontFamiliesA
CreateDIBitmap
DeleteDC
StretchBlt
GetObjectA
CreateCompatibleDC
SetPixelV
LineTo
MoveToEx
DeleteObject
GdiFlush
Polyline
SelectObject
SetBkMode
SetROP2
CreatePen
GetNearestPaletteIndex
comdlg32
CommDlgExtendedError
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
kernel32
GetProcAddress
GetTimeZoneInformation
GetProcessHeap
RaiseException
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDateFormatA
GetTimeFormatA
GetLocaleInfoA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryW
OutputDebugStringW
OutputDebugStringA
DebugBreak
VirtualQuery
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapReAlloc
HeapSize
HeapAlloc
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
FatalAppExitA
GetModuleFileNameW
TerminateProcess
HeapFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetFileAttributesA
RtlUnwind
SetStdHandle
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
HeapValidate
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitProcess
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
GetStartupInfoA
MultiByteToWideChar
GlobalSize
GetProfileIntA
SuspendThread
DuplicateHandle
GetCurrentProcess
SearchPathA
GetCPInfo
lstrcpyA
lstrlenA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ResumeThread
GetCurrentThread
GetModuleFileNameA
GetCurrentProcessId
IsDBCSLeadByteEx
FlushFileBuffers
ReadFile
GetTempPathA
GetTempFileNameA
GetFullPathNameA
GetFileInformationByHandle
DeleteFileA
GetVersionExA
SetThreadPriority
CreateProcessA
UnmapViewOfFile
GetHandleInformation
IsBadReadPtr
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CreateThread
CreateEventA
ExitThread
SetEvent
TerminateThread
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
InterlockedExchange
Sleep
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
SetLastError
WaitForSingleObject
GetThreadLocale
LoadLibraryA
GetStdHandle
FormatMessageA
GetLastError
IsDebuggerPresent
GetModuleHandleA
WriteFile
CreateFileA
SetFilePointer
FreeLibrary
ReleaseMutex
CreateMutexA
GetCurrentThreadId
GetFileType
VirtualAlloc
VirtualFree
SetEndOfFile
SetConsoleCtrlHandler
GetACP
GetCommandLineA
SetErrorMode
EnterCriticalSection
LeaveCriticalSection
imagehlp
SymCleanup
StackWalk
SymInitialize
Sections
.text Size: 873KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE