Static task
static1
Behavioral task
behavioral1
Sample
d5714dd2dffe829eb4ef8ae93d7a0aa25a21b82f32e4769b0f04e243b1153f82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5714dd2dffe829eb4ef8ae93d7a0aa25a21b82f32e4769b0f04e243b1153f82.exe
Resource
win10v2004-20221111-en
General
-
Target
d5714dd2dffe829eb4ef8ae93d7a0aa25a21b82f32e4769b0f04e243b1153f82
-
Size
570KB
-
MD5
b287d80b54e9306dbc20664b4f7a049b
-
SHA1
d21e6e9141e517fa3e89149a6887580eaf19e29a
-
SHA256
d5714dd2dffe829eb4ef8ae93d7a0aa25a21b82f32e4769b0f04e243b1153f82
-
SHA512
716cd0edade63ff50a117480c501938cd76ece2d690fe5fa499cf54e326e82cc52a10430901171b7cf799d0fb60d13569f7c1c1decfdfd230af11832699a0fc2
-
SSDEEP
12288:qVKTNiubWXs65yR4IEtnjLFLYRWnds3A2MstzF9e:+KJbJ63hd1ndsZ3f
Malware Config
Signatures
Files
-
d5714dd2dffe829eb4ef8ae93d7a0aa25a21b82f32e4769b0f04e243b1153f82.exe windows x86
3056e830215a89265d0f8698b4ce4305
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetWriteFileExW
ReadUrlCacheEntryStream
FtpGetCurrentDirectoryA
FindFirstUrlCacheEntryExA
comctl32
DrawStatusTextW
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_DrawIndirect
GetEffectiveClientRect
ImageList_GetImageCount
ImageList_Merge
ImageList_Create
ImageList_SetDragCursorImage
ImageList_Copy
CreateUpDownControl
MakeDragList
ImageList_GetIconSize
ImageList_GetImageRect
CreateStatusWindowA
ImageList_SetIconSize
InitCommonControlsEx
ImageList_Write
ImageList_GetBkColor
ImageList_DragLeave
ImageList_DragMove
ImageList_Read
ImageList_GetImageInfo
ImageList_Remove
user32
GetClassInfoExA
GetWindowPlacement
UnhookWindowsHook
RegisterClassA
RegisterClassExA
GetTabbedTextExtentA
DrawTextW
GetClassLongW
OpenIcon
MapVirtualKeyW
GetUpdateRect
DispatchMessageW
DrawStateA
PeekMessageA
GetCursorInfo
kernel32
FlushFileBuffers
SetUnhandledExceptionFilter
TlsGetValue
GetModuleFileNameW
GetSystemTimeAsFileTime
SetLastError
UnhandledExceptionFilter
GetTimeFormatA
GetStringTypeW
OpenMutexA
SetEnvironmentVariableA
FreeLibrary
LCMapStringW
VirtualAlloc
WideCharToMultiByte
GetProcessHeap
VirtualFree
GetLocaleInfoA
EnterCriticalSection
InterlockedExchange
GetProcAddress
GetLocaleInfoW
CloseHandle
GetUserDefaultLCID
GetConsoleMode
WriteFile
HeapSize
FreeEnvironmentStringsA
TlsAlloc
HeapCreate
GetLastError
LeaveCriticalSection
SetStdHandle
GetTimeZoneInformation
GetConsoleOutputCP
SetConsoleCtrlHandler
ResumeThread
HeapReAlloc
QueryPerformanceCounter
LoadLibraryA
SetHandleCount
IsDebuggerPresent
GetCurrentProcessId
HeapAlloc
GetCurrentProcess
CompareStringW
TerminateProcess
GetStartupInfoA
InitializeCriticalSection
GetStdHandle
GetCurrentThread
GetCommandLineW
CompareStringA
GetFileType
InterlockedIncrement
GetTickCount
InterlockedDecrement
DeleteCriticalSection
DebugBreak
GetModuleHandleA
GetStartupInfoW
WriteConsoleA
CreateMutexA
GetACP
HeapFree
GetEnvironmentStringsW
SetFilePointer
GetEnvironmentStrings
GetModuleFileNameA
CreateFileA
FreeEnvironmentStringsW
ExitProcess
GetCurrentThreadId
ReadFile
GetOEMCP
TlsFree
TlsSetValue
IsValidLocale
WriteConsoleW
GetStringTypeA
GetVersionExA
MultiByteToWideChar
GetDateFormatA
RtlUnwind
GetConsoleCP
Sleep
HeapDestroy
LCMapStringA
IsValidCodePage
GetCommandLineA
GetCPInfo
VirtualQuery
EnumSystemLocalesA
gdi32
ColorMatchToTarget
PolyBezierTo
MoveToEx
ScaleViewportExtEx
GetEnhMetaFileDescriptionW
GetTextMetricsW
IntersectClipRect
PolyPolygon
CreateBrushIndirect
CreateFontA
GetWorldTransform
CreateDIBitmap
CreateCompatibleDC
GetLayout
PlayEnhMetaFile
Rectangle
CreateFontIndirectW
CreateDCW
GetTextExtentPoint32A
GetLogColorSpaceA
DeleteDC
GetTextCharset
SelectObject
ExtCreateRegion
GetDeviceCaps
GetObjectW
GetStockObject
Sections
.text Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 258KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ