Static task
static1
Behavioral task
behavioral1
Sample
572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe
Resource
win10v2004-20221111-en
General
-
Target
572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb
-
Size
227KB
-
MD5
60ab08d07a7d5bf5b8667695b5353507
-
SHA1
edb869645071864a0d8518b9bfae2e61a4220e99
-
SHA256
572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb
-
SHA512
67464005929a08de7b2f054f1a6489fec94220b04814ba0f302b32ff5773b5a69745728f871df5aa63dad45a6910d872f2bc8e29e604ecb308bd72be9a6329c0
-
SSDEEP
1536:3+uOCKy4wGBhQBY7NWee7COfMWrWy1FZTVfDyo7RUQj4TfLKo3QPpLHJG3:uu33GfQBY7NWeCNrWyXys1kTuouHQ
Malware Config
Signatures
Files
-
572418ac57f98e0a20532da57552f70464e1c4c6f3e9d2f3b5f696ee69422ecb.exe windows x86
9b144eb25d4e6b137ad8ba0399998b8b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
CreatePipe
GetBinaryTypeA
CreateHardLinkW
WriteConsoleInputW
WriteConsoleInputW
SetThreadExecutionState
LocalFlags
Process32First
GetBinaryTypeA
SetHandleInformation
SetHandleInformation
SetConsoleActiveScreenBuffer
WritePrivateProfileSectionW
AddAtomW
Heap32ListFirst
WritePrivateProfileSectionW
FileTimeToDosDateTime
WritePrivateProfileSectionA
CreateHardLinkW
SetHandleInformation
Process32First
WritePrivateProfileSectionW
ReadConsoleA
GlobalAddAtomA
LocalShrink
GetCommMask
Process32First
GetBinaryTypeA
AddAtomW
GetCommMask
GetProcessShutdownParameters
ExpandEnvironmentStringsA
Thread32Next
DisconnectNamedPipe
WriteConsoleInputW
GlobalFlags
GlobalFlags
ReadConsoleA
SetHandleInformation
GetBinaryTypeA
CreatePipe
GetSystemTime
CallNamedPipeW
ReadConsoleInputW
SetConsoleActiveScreenBuffer
AddAtomW
WritePrivateProfileSectionW
ClearCommBreak
WritePrivateProfileSectionW
GetCommTimeouts
GetProcessShutdownParameters
WritePrivateProfileSectionW
GetThreadTimes
FindCloseChangeNotification
FindNextFileW
GetThreadTimes
CreateConsoleScreenBuffer
SetHandleInformation
IsValidLocale
GetThreadTimes
GetSystemDirectoryW
Thread32Next
user32
GetMouseMovePointsEx
DdeCmpStringHandles
GetWindowRgn
EnumDisplaySettingsExW
VkKeyScanExA
CallNextHookEx
CreateWindowExA
FindWindowExW
UpdateWindow
CharPrevW
SetProcessWindowStation
FindWindowA
PostThreadMessageA
GetTitleBarInfo
GetTitleBarInfo
RegisterClassExW
CreateDialogParamA
TranslateAcceleratorA
InSendMessage
DdeConnectList
EnumDisplaySettingsExW
SetWindowsHookW
FindWindowExA
SetWindowsHookW
CharPrevW
EnumDisplaySettingsExW
GetWindowRgn
UnhookWindowsHookEx
MonitorFromPoint
UnhookWindowsHookEx
CreateWindowExA
LockWindowUpdate
FindWindowExA
RegisterClassExW
GetWindowRgn
CreateDialogParamA
CallNextHookEx
IMPGetIMEA
GetClientRect
DdeCmpStringHandles
SetMenuItemInfoA
WINNLSEnableIME
RegisterClassExW
EnumDisplaySettingsExW
IsZoomed
DdeReconnect
GetThreadDesktop
GetTitleBarInfo
WINNLSEnableIME
PostThreadMessageA
SetWindowTextA
SetWindowsHookW
WINNLSGetEnableStatus
TranslateAcceleratorA
DdeQueryStringW
SetWindowTextA
EnumDisplaySettingsExW
UpdateWindow
PostThreadMessageA
WaitForInputIdle
CallNextHookEx
SetWindowTextA
SetWindowTextA
GetWindowRgn
EnumDisplaySettingsExW
CallNextHookEx
FindWindowA
UnhookWindowsHookEx
UpdateWindow
EnumDisplaySettingsExW
Sections
.text Size: 208KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tabl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tabl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tabl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tabl Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tabl Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE