Static task
static1
Behavioral task
behavioral1
Sample
52d9642c0148b215088b1fee8da5325a3f0067fa69132e75477e67e702f3d053.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
52d9642c0148b215088b1fee8da5325a3f0067fa69132e75477e67e702f3d053.exe
Resource
win10v2004-20221111-en
General
-
Target
52d9642c0148b215088b1fee8da5325a3f0067fa69132e75477e67e702f3d053
-
Size
433KB
-
MD5
81d6608d365553332b24d7010bfa3db5
-
SHA1
84755b2ac2d7d89d7ae65beb5c1c3fc7af382153
-
SHA256
52d9642c0148b215088b1fee8da5325a3f0067fa69132e75477e67e702f3d053
-
SHA512
42af9e30321657b23bc748f1434382cae414ca22ed6f941d5258db9ed35bffa7805abe3814a849154df49544a5a670c2d874eb8dd385a914240a1efe41f5ab56
-
SSDEEP
6144:JoMO4e/JcVB+dJj+ZU12+r1Q+UmUWcC7VfJVgbJo:gT/JcVB+7+OoAkPC7VfJVgbJo
Malware Config
Signatures
Files
-
52d9642c0148b215088b1fee8da5325a3f0067fa69132e75477e67e702f3d053.exe windows x86
53951eb8c08131153e030e929890a679
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
gdi32
SelectObject
GetMapMode
SetMapMode
DPtoLP
BitBlt
SetStretchBltMode
StretchBlt
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
SelectClipRgn
GetCurrentObject
DeleteDC
GetStockObject
CreateRectRgn
CombineRgn
GetClipRgn
CreateRectRgnIndirect
SetRectRgn
GetDeviceCaps
CreateDCA
GetClipBox
GdiSetBatchLimit
kernel32
GetLastError
FormatMessageA
LocalFree
FindResourceA
LoadResource
GetTickCount
Sleep
SetLastError
lstrlenA
LockResource
GlobalHandle
GlobalUnlock
GlobalFree
FreeResource
GlobalAlloc
GlobalLock
GetCurrentThread
SetThreadPriority
ExitProcess
GetCommandLineA
GetStdHandle
GetFileType
CreateFileA
ReadFile
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetStartupInfoA
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentStrings
FreeEnvironmentStringsA
CloseHandle
SetFilePointer
DeleteFileA
WriteFile
user32
EqualRect
LoadStringA
wsprintfA
MessageBoxA
OffsetRect
LoadImageA
SetRect
GetDC
ReleaseDC
WindowFromDC
GetClientRect
GetSystemMetrics
GetAsyncKeyState
PeekMessageA
GetCursorPos
InflateRect
IntersectRect
FillRect
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetWindowRect
ClientToScreen
SetWindowPos
ShowWindow
UpdateWindow
DispatchMessageA
GetMessageA
ClipCursor
TranslateMessage
BeginPaint
EndPaint
InvalidateRect
DefWindowProcA
ShowCursor
SetCursorPos
DrawIconEx
SystemParametersInfoA
PtInRect
PostQuitMessage
winmm
timeGetTime
sndPlaySoundA
waveOutGetNumDevs
waveOutOpen
waveOutGetErrorTextA
waveOutReset
waveOutClose
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exc Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ