Static task
static1
Behavioral task
behavioral1
Sample
57509f8df642d2afe79c8e66e514770c8b65205b6b9580f13ff5ae26a18798cd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
57509f8df642d2afe79c8e66e514770c8b65205b6b9580f13ff5ae26a18798cd.exe
Resource
win10v2004-20220812-en
General
-
Target
57509f8df642d2afe79c8e66e514770c8b65205b6b9580f13ff5ae26a18798cd
-
Size
96KB
-
MD5
1a43a8da042a8f72eef258184a2ce850
-
SHA1
b8d4c14cbda4cd0dbab293805182b3ab8d388fb0
-
SHA256
57509f8df642d2afe79c8e66e514770c8b65205b6b9580f13ff5ae26a18798cd
-
SHA512
545891ff5fbf3ffe5f357978e6368b23eeadbe03a2bdfb08c52ac61cbf0384ea6a22e4586aae45d7854202f35f7a3b53da1d3b02e20c207be6738947c94b8ff4
-
SSDEEP
1536:OWD6j8TQ6XTSoYQvTCEx9UcvOQGLSL5CZstvzKPlfstvzKPlcstvzKPl:P6f3oYQLCqUJTLSL5CZ/f/c/
Malware Config
Signatures
Files
-
57509f8df642d2afe79c8e66e514770c8b65205b6b9580f13ff5ae26a18798cd.exe windows x86
04d9be89e197dd1dc0304ff7e6c031c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetDlgItemTextA
SetWindowPos
GetDlgItem
AnyPopup
BringWindowToTop
comctl32
ord8
DestroyPropertySheetPage
UninitializeFlatSB
InitCommonControlsEx
ord6
ord17
FlatSB_SetScrollPos
InitializeFlatSB
ord15
ord5
PropertySheetA
FlatSB_SetScrollInfo
CreatePropertySheetPageA
shlwapi
SHRegEnumUSKeyW
PathIsRelativeA
SHEnumKeyExW
SHRegCreateUSKeyA
PathIsFileSpecW
PathBuildRootA
PathIsRootW
StrRChrIA
StrStrW
StrRStrIW
StrToIntA
StrStrA
kernel32
LocalHandle
LeaveCriticalSection
GlobalMemoryStatus
WideCharToMultiByte
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
winspool.drv
DeletePrinterConnectionA
AddPrinterDriverA
GetPrinterDriverW
EnumJobsA
wsnmp32
ord220
ord203
ord502
ord104
ord400
ord900
ord605
setupapi
SetupCopyErrorA
SetupDiRemoveDevice
SetupQueueRenameSectionW
SetupGetLineCountW
comdlg32
CommDlgExtendedError
ChooseFontA
FindTextW
GetFileTitleW
PageSetupDlgW
dsuiext
ord9
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ