Static task
static1
Behavioral task
behavioral1
Sample
51a6ba3c622594bf175e0d5c443760fde088439671d4adde27beae6345a7f010.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
51a6ba3c622594bf175e0d5c443760fde088439671d4adde27beae6345a7f010.exe
Resource
win10v2004-20221111-en
General
-
Target
51a6ba3c622594bf175e0d5c443760fde088439671d4adde27beae6345a7f010
-
Size
549KB
-
MD5
26f3795939222018a28e1b608d877050
-
SHA1
05b5201150fc7fd14a0da8e2fc5bd044d5253cfd
-
SHA256
51a6ba3c622594bf175e0d5c443760fde088439671d4adde27beae6345a7f010
-
SHA512
b639f271ae18c241fd97a5ae304aad9947cc4a420878062d449e28782594e30a4194cf6a116ee766fc444bd884c7ab93132aa6be55b29218d0d11f7ed78a4c9d
-
SSDEEP
12288:Lu/0orFvVXAMwo6ooGamQR9qL66WvoMzlTTXb/dp:LLob87LmW9q26YbTX7j
Malware Config
Signatures
Files
-
51a6ba3c622594bf175e0d5c443760fde088439671d4adde27beae6345a7f010.exe windows x86
831be52e21173f28d3dbcbac4c98a0cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
shlwapi
PathStripToRootA
SHGetValueA
PathFileExistsA
PathRemoveExtensionA
PathFindExtensionA
StrToIntA
PathIsUNCA
PathFindFileNameA
advapi32
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
SetSecurityDescriptorDacl
RegOpenKeyA
RegDeleteKeyA
wininet
InternetCrackUrlA
kernel32
GlobalFindAtomA
GlobalGetAtomNameA
InterlockedIncrement
DeleteFileA
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileA
GetFullPathNameA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalFlags
GetCPInfo
lstrcmpW
SetErrorMode
GetFileAttributesA
GetFileTime
GetTickCount
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetConsoleCP
GetConsoleMode
Sleep
GetTimeZoneInformation
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
InterlockedDecrement
GetModuleFileNameW
ReleaseSemaphore
CreateSemaphoreA
FreeResource
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
RaiseException
LocalAlloc
GetProcessHeap
HeapFree
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
LocalFree
CreateMutexA
GetCurrentThreadId
ExitProcess
CopyFileA
GetModuleFileNameA
GetCommandLineA
GetComputerNameA
SetLastError
GetVolumeInformationA
GetTempFileNameA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetVersionExA
GetCurrentProcessId
FreeLibrary
LoadLibraryW
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
InterlockedExchange
GetTempPathA
CompareFileTime
SystemTimeToFileTime
LoadLibraryA
GetProcAddress
CreateFileA
WideCharToMultiByte
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WaitForSingleObject
GetOEMCP
CreateDirectoryA
user32
BeginPaint
EndPaint
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
DestroyMenu
RegisterClipboardFormatA
PostThreadMessageA
MoveWindow
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
GetWindowDC
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
wsprintfA
GetParent
GetClassNameA
GetSystemMetrics
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
BringWindowToTop
GetClientRect
SetWindowTextA
WaitForInputIdle
EnumThreadWindows
EnumChildWindows
SendMessageTimeoutA
PostMessageA
EnableWindow
RegisterWindowMessageA
SetParent
SetTimer
EnumWindows
GetWindowTextA
GetCursorPos
CharUpperA
GetDC
ReleaseDC
GetSysColorBrush
CopyRect
ShowWindow
SetActiveWindow
gdi32
SetTextColor
GetClipBox
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
Escape
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
CreateBitmap
DeleteDC
GetDeviceCaps
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SelectObject
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oledlg
ord8
ole32
CoGetClassObject
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
OleFlushClipboard
StgOpenStorageOnILockBytes
CoTaskMemFree
OleRun
CoInitialize
CoGetMalloc
CoUninitialize
CoInitializeEx
CoCreateInstance
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
oleaut32
LoadTypeLi
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocStringByteLen
SysStringLen
VariantChangeType
GetErrorInfo
VariantClear
SysFreeString
SysAllocStringLen
SysAllocString
VariantCopy
VariantInit
ws2_32
WSAStartup
Sections
.text Size: 412KB - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ