Static task
static1
Behavioral task
behavioral1
Sample
53d8d466679a01953aab35947655a8c1a2ff3c19ac188e9f40e3135553cf7556.exe
Resource
win7-20220812-en
General
-
Target
53d8d466679a01953aab35947655a8c1a2ff3c19ac188e9f40e3135553cf7556
-
Size
801KB
-
MD5
f3ab03c11b45d48d8efd4206b1d17ccd
-
SHA1
1f93765585ff9acc1aabfb261cb0fc32486c6e59
-
SHA256
53d8d466679a01953aab35947655a8c1a2ff3c19ac188e9f40e3135553cf7556
-
SHA512
2713bc8fb174a035c16b428a188c6c702aa7ed533e0a65a0f22019037f8abff2ceebf75a51bfe776d290cee6a5bebcdd3d69d4724bd08ee543491e94961118b0
-
SSDEEP
24576:JVjT94ly+LhDWjjw/vEE9y/cZWTWDFwS1Zft5mQmzhH9:JtBEy+o88D/UDyYeVH9
Malware Config
Signatures
Files
-
53d8d466679a01953aab35947655a8c1a2ff3c19ac188e9f40e3135553cf7556.exe windows x86
e55dbecdaf2c7cc43f3d577e70c6c583
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
lstrlenA
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
MultiByteToWideChar
GetLocaleInfoW
lstrcmpiW
GetEnvironmentVariableW
SetCurrentDirectoryW
lstrcmpW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
GetCurrentDirectoryW
GetTempPathW
WideCharToMultiByte
CompareFileTime
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
LoadLibraryA
SetEnvironmentVariableW
WriteFile
CreateFileW
GetDriveTypeW
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
GetComputerNameW
CreateEventW
SetEvent
ResetEvent
CreateThread
InitializeCriticalSection
LockResource
LoadResource
FindResourceA
MulDiv
GetCurrentThreadId
GetSystemDirectoryW
TerminateThread
ResumeThread
SuspendThread
LocalFree
lstrcpyW
FormatMessageW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
VirtualFree
GetVersionExW
GetFileSize
SetFilePointer
ReadFile
SetFileTime
SetEndOfFile
GetFileInformationByHandle
WaitForMultipleObjects
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetExitCodeThread
Sleep
SetFileAttributesW
SetLastError
GetLastError
WaitForSingleObject
CloseHandle
GetProcAddress
lstrlenW
UnhandledExceptionFilter
user32
LoadImageW
LoadIconW
MessageBeep
EnableWindow
IsWindow
EnableMenuItem
GetSystemMenu
CreateWindowExA
DestroyWindow
wvsprintfW
SystemParametersInfoW
GetSystemMetrics
SetFocus
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowLongW
GetClientRect
GetDlgItem
GetKeyState
MessageBoxA
PtInRect
CallNextHookEx
KillTimer
SetTimer
DefWindowProcW
CallWindowProcW
GetWindowDC
DrawIconEx
EndDialog
SendMessageW
SetWindowPos
GetWindow
ClientToScreen
GetDC
DrawTextW
ReleaseDC
CharUpperW
ScreenToClient
DialogBoxIndirectParamW
GetWindowRect
GetParent
wsprintfW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
GetWindowLongW
ShowWindow
gdi32
GetDeviceCaps
SelectObject
CreateFontIndirectW
GetObjectW
DeleteObject
shell32
ShellExecuteExW
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
SHGetSpecialFolderPathW
oleaut32
VariantClear
SysAllocStringLen
SysAllocString
msvcrt
wcsncmp
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
wcscmp
_beginthreadex
__CxxFrameHandler3
_CxxThrowException
malloc
free
wcsstr
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?terminate@@YAXXZ
_controlfp
wcsncpy
strncpy
memcpy
memmove
_wcsnicmp
memset
_wtol
_purecall
memcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
shlwapi
PathFileExistsW
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ