Static task
static1
Behavioral task
behavioral1
Sample
5311782fc8c45e1ff0f79ffb669a082e8058adb55edc7e0d06b6418009285531.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5311782fc8c45e1ff0f79ffb669a082e8058adb55edc7e0d06b6418009285531.exe
Resource
win10v2004-20221111-en
General
-
Target
5311782fc8c45e1ff0f79ffb669a082e8058adb55edc7e0d06b6418009285531
-
Size
806KB
-
MD5
851bea2ca6b900bdb66a3871d4ae7193
-
SHA1
d62e7cf40f1e0ee5a56ca3002267575c4973bb0e
-
SHA256
5311782fc8c45e1ff0f79ffb669a082e8058adb55edc7e0d06b6418009285531
-
SHA512
aed81e3141e38523eeb14a4582a2c2432bf07a5243dd16cd62cbffc45bbd70fbbba683d4bc4515c8d20ba2c669502b5b3d8dadcb1ba5ed1b307691a8d493b038
-
SSDEEP
24576:TE9rFCKN30p1cwCzFabyOPu4/hLTtdaPvE:49/mnCzUn8s
Malware Config
Signatures
Files
-
5311782fc8c45e1ff0f79ffb669a082e8058adb55edc7e0d06b6418009285531.exe windows x86
44ae210f77ea0b7b5372f519863f9186
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoTaskMemFree
advapi32
RegCreateKeyExA
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA
oleaut32
SysAllocStringLen
user32
DestroyMenu
PostQuitMessage
SetWindowPos
IsWindow
EndPaint
PeekMessageA
GetCursorPos
ReleaseDC
SendMessageW
GetClientRect
DestroyWindow
GetMessageA
GetParent
UpdateWindow
ShowWindow
SetCapture
EnableWindow
TranslateMessage
GetWindow
LoadStringA
EnableMenuItem
RegisterClassA
GetWindowLongA
SetTimer
SetForegroundWindow
DispatchMessageA
SetFocus
BeginPaint
KillTimer
DefWindowProcA
GetSystemMetrics
GetWindowRect
PostMessageA
SetWindowLongA
SetWindowTextA
GetSubMenu
CreateWindowExA
GetDlgItem
ScreenToClient
GetDesktopWindow
EndDialog
GetFocus
MessageBoxA
GetSysColor
SystemParametersInfoA
IsWindowVisible
InvalidateRect
CallWindowProcA
SetCursor
FillRect
kernel32
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
FindFirstFileW
HeapDestroy
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
LocalAlloc
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetFullPathNameA
GetOEMCP
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
FindClose
TlsGetValue
FormatMessageA
OutputDebugStringA
SetLastError
GetModuleFileNameW
VirtualProtect
IsDebuggerPresent
HeapAlloc
GetVersionExA
GetModuleFileNameA
LoadLibraryExA
UnhandledExceptionFilter
InterlockedDecrement
MultiByteToWideChar
SetFilePointer
CreateThread
SetUnhandledExceptionFilter
MulDiv
GetSystemDirectoryA
SetEnvironmentVariableA
TerminateProcess
WriteConsoleA
GlobalAlloc
GetCurrentThreadId
GetTickCount
GetVersion
GetCommandLineA
GetModuleHandleA
GetCurrentProcessId
GetLastError
GetCurrentThread
ExitProcess
VirtualAlloc
FindResourceA
Sleep
VirtualFree
FindResourceW
HeapCreate
IsValidCodePage
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
GetCPInfo
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
GetConsoleCP
lstrlenA
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
CreateFileA
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
RemoveDirectoryA
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
ResetEvent
CompareStringA
GetDiskFreeSpaceA
GlobalFree
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
SetErrorMode
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
gdi32
SetBkColor
SetTextColor
SelectObject
Sections
.text Size: 761KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ