Static task
static1
Behavioral task
behavioral1
Sample
a55b4f1178a81f5daa0f1b6721efc90b733f182c19723725241966f094b1d84b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a55b4f1178a81f5daa0f1b6721efc90b733f182c19723725241966f094b1d84b.exe
Resource
win10v2004-20220812-en
General
-
Target
a55b4f1178a81f5daa0f1b6721efc90b733f182c19723725241966f094b1d84b
-
Size
80KB
-
MD5
0c7cd57c14c855bed481a71da821b9ae
-
SHA1
5a3409691a0925d234cfda8bca702efdd7343843
-
SHA256
a55b4f1178a81f5daa0f1b6721efc90b733f182c19723725241966f094b1d84b
-
SHA512
3d17e558b5f20028125f2e275a81c527f3fd64e58c7b1cf5aa9a407e189659e59267b79f460e742a78c9b01fe203967a088e642fc7e93c93b9fc07ffc4989656
-
SSDEEP
1536:fee35pevOdITCBi3TrnRPS+P4Ot6yEcUxBsQaxCQ5Q2UFZJ28l6mjWnCR:Lc2dXBkTrnRrHEcGGCYpzo6m3R
Malware Config
Signatures
Files
-
a55b4f1178a81f5daa0f1b6721efc90b733f182c19723725241966f094b1d84b.exe windows x86
abfd00d646f2350219a83615f9ad1eac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
SetWindowTextA
GetMessageA
GetSubMenu
SetWindowPos
EnumWindows
UnhookWindowsHookEx
GetSysColorBrush
GetSysColor
EqualRect
GetScrollPos
PostQuitMessage
EnableMenuItem
FrameRect
kernel32
GetTimeZoneInformation
VirtualAllocEx
GetOEMCP
InterlockedExchange
GetTickCount
GetCurrentProcessId
ExitProcess
FileTimeToSystemTime
GetThreadLocale
GetStartupInfoA
GetSystemTime
GetFileAttributesA
GetTempPathA
RtlUnwind
SetUnhandledExceptionFilter
gdi32
ExcludeClipRect
CopyEnhMetaFileA
SetViewportExtEx
CreateICW
GetMapMode
DPtoLP
SelectClipPath
CreateCompatibleBitmap
FillRgn
ole32
CoTaskMemRealloc
OleRun
CoCreateInstance
StgOpenStorage
CoInitialize
DoDragDrop
StringFromGUID2
CoInitializeSecurity
CoRevokeClassObject
advapi32
RegCreateKeyA
GetUserNameA
CryptHashData
QueryServiceStatus
FreeSid
CheckTokenMembership
RegCreateKeyExW
GetSecurityDescriptorDacl
RegQueryValueExW
AdjustTokenPrivileges
msvcrt
fprintf
strncpy
_flsbuf
_mbscmp
fflush
signal
puts
strlen
strcspn
iswspace
__setusermatherr
__getmainargs
_CIpow
_lock
raise
_strdup
__initenv
_fdopen
comctl32
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Destroy
CreatePropertySheetPageA
ImageList_SetIconSize
InitCommonControls
ImageList_GetBkColor
ImageList_LoadImageW
ImageList_DragEnter
ImageList_LoadImageA
ImageList_GetIcon
ImageList_Write
ImageList_ReplaceIcon
shell32
CommandLineToArgvW
SHBrowseForFolderA
ExtractIconExW
ShellExecuteW
DragQueryFileA
DragQueryFileW
ShellExecuteEx
DoEnvironmentSubstW
DragAcceptFiles
SHGetPathFromIDList
ExtractIconW
oleaut32
VariantCopy
SysReAllocStringLen
SafeArrayRedim
SafeArrayGetUBound
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayUnaccessData
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE