Static task
static1
Behavioral task
behavioral1
Sample
a5d4b5769c3e136f288bb8412ff58e13d42b71d822ec3cde19e45fc7bbce5821.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a5d4b5769c3e136f288bb8412ff58e13d42b71d822ec3cde19e45fc7bbce5821.exe
Resource
win10v2004-20220812-en
General
-
Target
a5d4b5769c3e136f288bb8412ff58e13d42b71d822ec3cde19e45fc7bbce5821
-
Size
117KB
-
MD5
0df2a6283116cee371738dae951004b0
-
SHA1
b46322790f374098d8f592b364e83edcce4da8c2
-
SHA256
a5d4b5769c3e136f288bb8412ff58e13d42b71d822ec3cde19e45fc7bbce5821
-
SHA512
29ba939216d11162b97c7d56a6250809770391690786e8c3161f067f1567445380546c3ae6f02761a8d14f46c6c1360816428506525326836cb9bfc14ac66556
-
SSDEEP
1536:e2ebjkvKI2glNVEsuDzXsfYtC0HvnHTIrenZ/6cea1Mc3d//cjbr0s1IHoRM23ny:ebHkjX12X6wvHk0PMcN//cjU7JWPHa
Malware Config
Signatures
Files
-
a5d4b5769c3e136f288bb8412ff58e13d42b71d822ec3cde19e45fc7bbce5821.exe windows x86
29d2ae5937f214ff36a69a49a41e2016
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
DeleteTimerQueue
GetSystemDefaultUILanguage
FormatMessageA
Beep
GetStringTypeExW
CreateDirectoryW
TlsFree
FindFirstFileExA
OutputDebugStringW
GetFullPathNameA
SetWaitableTimer
GetProfileStringA
CreatePipe
TlsGetValue
GetCurrentProcess
IsProcessorFeaturePresent
GetProfileIntA
EnumUILanguagesW
GetLongPathNameW
CloseHandle
GetCompressedFileSizeW
GetFileSizeEx
CreateHardLinkW
GlobalSize
SetTapePosition
GetCurrentProcess
EnumResourceNamesW
GetCurrentDirectoryW
RemoveDirectoryA
GetCurrentProcess
FindAtomA
WaitForMultipleObjectsEx
user32
SetActiveWindow
CreateCaret
SetMessageQueue
SetRect
ReplyMessage
SetForegroundWindow
DdeFreeDataHandle
DrawTextExW
ChangeClipboardChain
LoadKeyboardLayoutW
EnumDesktopWindows
GetScrollPos
GetKeyboardState
IsWindowVisible
LookupIconIdFromDirectory
EnumDisplayMonitors
OemToCharW
IsDialogMessageW
GetWindowRect
EnumPropsExW
DeferWindowPos
CreateIconFromResource
CheckMenuRadioItem
OemToCharBuffW
DdeConnect
DrawCaption
InvalidateRect
DdeGetData
DdeInitializeW
SetWindowLongW
GetMessageA
GetDlgItemInt
PtInRect
RegisterShellHookWindow
CreateCursor
SetDeskWallpaper
UserHandleGrantAccess
CheckMenuItem
SetWindowTextW
LoadCursorW
RealChildWindowFromPoint
GetAsyncKeyState
AllowSetForegroundWindow
UnloadKeyboardLayout
GetKeyboardType
CharNextExA
DrawStateW
BroadcastSystemMessageA
FindWindowW
IsZoomed
OpenWindowStationW
DrawFrameControl
DdeUninitialize
GetMenuDefaultItem
DdePostAdvise
OemToCharA
CheckRadioButton
WaitForInputIdle
InsertMenuA
SetCaretBlinkTime
TileChildWindows
LoadAcceleratorsA
GetNextDlgTabItem
DdeCmpStringHandles
IMPQueryIMEA
SetLayeredWindowAttributes
GetDlgCtrlID
WindowFromPoint
SetDebugErrorLevel
GetClassInfoExA
GetWindowLongA
SendMessageA
OemToCharBuffA
EnumPropsW
SetUserObjectSecurity
MessageBoxA
GetClassInfoExW
GetMenuItemCount
SetMenuInfo
IMPSetIMEW
LoadIconA
LoadIconW
ScreenToClient
SetKeyboardState
IsCharAlphaA
RegisterDeviceNotificationA
ole32
CoSetProxyBlanket
CoGetCallerTID
CoMarshalInterThreadInterfaceInStream
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 275B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 39KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.arch Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE