Static task
static1
Behavioral task
behavioral1
Sample
d65a6527470b8277807223932efd232c8494d7d8c69267daddd57e8fde31f536.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d65a6527470b8277807223932efd232c8494d7d8c69267daddd57e8fde31f536.exe
Resource
win10v2004-20221111-en
General
-
Target
d65a6527470b8277807223932efd232c8494d7d8c69267daddd57e8fde31f536
-
Size
576KB
-
MD5
5d68bfac5cdcd54f17a931a91441c7ee
-
SHA1
d69bf66979a83c9542507fd3519255c4f2b5097b
-
SHA256
d65a6527470b8277807223932efd232c8494d7d8c69267daddd57e8fde31f536
-
SHA512
2bd0e93496ad9791e0ab6d87daa7524523430d9ba52ecd0d67b054da2e830ff94974d9b5ed80f9961b9b87cbb0a11e385b803c8046fd231d367eba066dae8a26
-
SSDEEP
12288:Gj5GlF6fYu7hHuXnM2ykDQ6qjgRcV6CVIescCErFoTi9s:YP/JcCVIebCd
Malware Config
Signatures
Files
-
d65a6527470b8277807223932efd232c8494d7d8c69267daddd57e8fde31f536.exe windows x86
45719184b67a8d35f1401226731578e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
EnterCriticalSection
GetEnvironmentStringsW
CreateProcessW
FreeLibrary
ResetEvent
GetCommandLineA
GetLocalTime
FlushFileBuffers
CreateDirectoryA
ReadFile
Sleep
CloseHandle
DeleteFileA
RemoveDirectoryA
FindNextFileA
TlsFree
LoadLibraryExA
TerminateProcess
DuplicateHandle
GetDiskFreeSpaceA
IsDebuggerPresent
InterlockedExchange
InterlockedDecrement
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetEvent
LoadLibraryExW
CreateFileA
GetStartupInfoW
HeapFree
FindFirstFileW
HeapAlloc
GetProcessHeap
IsBadWritePtr
GlobalLock
GetCPInfo
LeaveCriticalSection
SetStdHandle
HeapCreate
RaiseException
LoadResource
FindResourceA
LoadLibraryW
LoadLibraryA
LocalFree
LocalAlloc
DeleteFileW
lstrcpyA
lstrcpynA
WriteFile
GlobalFree
GlobalAlloc
GetStringTypeW
GetStartupInfoA
TlsSetValue
MapViewOfFile
GetCurrentThread
SetEndOfFile
VirtualFree
GetConsoleMode
CreateFileMappingA
CreateEventA
InterlockedIncrement
WritePrivateProfileStringA
LCMapStringW
WriteConsoleA
MultiByteToWideChar
GetWindowsDirectoryA
InterlockedCompareExchange
GetCommandLineW
WideCharToMultiByte
GetLocaleInfoA
lstrlenW
GetACP
MulDiv
lstrlenA
lstrcmpiA
IsValidCodePage
GetConsoleCP
GetSystemDirectoryA
SetHandleCount
GetOEMCP
FindClose
GetFileAttributesA
CreateFileW
GetCurrentProcess
ExpandEnvironmentStringsA
GetFileSize
FindResourceW
GetModuleHandleW
GetTempPathA
VirtualAlloc
VirtualQuery
HeapReAlloc
WaitForMultipleObjects
GetCurrentDirectoryA
CreateThread
GetVersion
LockResource
HeapSize
InitializeCriticalSection
SetLastError
FormatMessageA
FormatMessageW
GetLastError
GetModuleFileNameA
GetCurrentThreadId
GetModuleHandleA
SetFilePointer
GetFileType
FindFirstFileA
GetStdHandle
SizeofResource
GetPrivateProfileStringA
GetFileAttributesW
TlsGetValue
CompareStringW
LCMapStringA
GetModuleFileNameW
IsBadReadPtr
GetConsoleOutputCP
UnhandledExceptionFilter
GetExitCodeProcess
CreateMutexA
GetStringTypeA
GetFullPathNameA
WaitForSingleObject
GetThreadLocale
GetCurrentProcessId
SetErrorMode
SetFileAttributesA
TlsAlloc
ExitProcess
GetProcAddress
GetSystemInfo
ReleaseMutex
CreateProcessA
FindNextFileW
VirtualProtect
DeleteCriticalSection
GetEnvironmentStrings
UnmapViewOfFile
HeapDestroy
FreeEnvironmentStringsA
GlobalUnlock
FileTimeToSystemTime
CompareStringA
GetVersionExA
user32
MessageBoxA
GetParent
GetWindowLongA
GetDlgItem
GetSysColor
ReleaseDC
GetDC
CreateWindowExA
GetSubMenu
GetDesktopWindow
GetSystemMetrics
SetTimer
SetFocus
SetDlgItemTextA
DrawTextA
GetFocus
ScreenToClient
FillRect
TrackPopupMenu
RegisterClassA
EnableMenuItem
MoveWindow
EnableWindow
SetForegroundWindow
IsWindowEnabled
DefWindowProcA
GetClientRect
SetWindowTextA
SetWindowLongA
PeekMessageA
KillTimer
SystemParametersInfoA
UpdateWindow
ReleaseCapture
SetWindowPos
InvalidateRect
IsWindow
ShowWindow
DestroyMenu
DispatchMessageA
GetMessageA
SendMessageA
LoadCursorA
SetCursor
BeginPaint
TranslateMessage
GetWindowRect
DestroyWindow
PostMessageA
GetCursorPos
IsIconic
PostQuitMessage
EndDialog
EndPaint
oleaut32
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
VariantClear
VariantInit
gdi32
CreateSolidBrush
CreateFontIndirectA
GetDeviceCaps
CreateCompatibleDC
DeleteObject
SelectObject
advapi32
RegDeleteValueA
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
msvcrt
_strcmpi
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
free
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ