Static task
static1
Behavioral task
behavioral1
Sample
5fd2211ed4e6e63ebf7cbdf9346cab58ff3850b3d75e668eeaf3d97f94dcf590.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5fd2211ed4e6e63ebf7cbdf9346cab58ff3850b3d75e668eeaf3d97f94dcf590.exe
Resource
win10v2004-20221111-en
General
-
Target
5fd2211ed4e6e63ebf7cbdf9346cab58ff3850b3d75e668eeaf3d97f94dcf590
-
Size
204KB
-
MD5
2b45d879ff282d05402bf324ac6ce180
-
SHA1
dd7a1738be495accf2a80cb2fd763b08cec89a86
-
SHA256
5fd2211ed4e6e63ebf7cbdf9346cab58ff3850b3d75e668eeaf3d97f94dcf590
-
SHA512
ed61915e8dbacf4b4ff037587e129467b40bf3a1bc6cab2746fe08803dd39c9f16eea11cb35d326014ef631e5d2f61c448a147152ee116091ae9d0e6b8bdfb75
-
SSDEEP
6144:snJjRMeiweagdbwdtfk92xFF2bv3KwVBhSIM4KscsFX:sJj+eiwNHM92nQbvq7sH
Malware Config
Signatures
Files
-
5fd2211ed4e6e63ebf7cbdf9346cab58ff3850b3d75e668eeaf3d97f94dcf590.exe windows x86
780e09d4bd553c3299dcd3c9a0f08521
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
IsProcessorFeaturePresent
RtlUnwind
GetConsoleMode
GetConsoleCP
SetFilePointer
Sleep
SetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteConsoleW
FlushFileBuffers
ReadFile
HeapSize
CloseHandle
LoadLibraryA
GetLastError
lstrlenW
ExitThread
LoadLibraryW
HeapCreate
GetTickCount
GetCurrentProcess
HeapAlloc
FreeLibrary
WriteFile
ExitProcess
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
CreateFileW
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
DecodePointer
TlsSetValue
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
user32
SetDlgItemTextA
UpdateWindow
SendMessageW
IsWindowVisible
GetSystemMetrics
MapWindowPoints
EndDeferWindowPos
EnableWindow
GetWindowRect
DrawTextA
SetForegroundWindow
GetParent
LoadMenuA
LoadIconA
GetClientRect
SendMessageA
DrawEdge
GetDC
SetWindowLongA
MessageBoxA
GetWindowLongA
ReleaseDC
GetDlgItem
CharUpperW
EndDialog
GetSysColor
LoadStringW
GetSysColorBrush
IsWindow
DeferWindowPos
BeginDeferWindowPos
gdi32
GetTextExtentPoint32W
GetTextMetricsW
CreateFontIndirectW
CreateFontIndirectA
GetCurrentObject
SetPixel
SetBkMode
DeleteObject
SelectObject
GetObjectA
GetStockObject
GetLayout
advapi32
RegQueryValueExA
shell32
ord100
ole32
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantInit
SysAllocString
VariantClear
SysFreeString
winmm
midiOutOpen
midiOutSetVolume
midiOutGetDevCapsA
midiOutClose
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ