Static task
static1
Behavioral task
behavioral1
Sample
518addc1ded0c14ad89604303cb9470ca04702948932b662b64917592dca9a71.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
518addc1ded0c14ad89604303cb9470ca04702948932b662b64917592dca9a71.exe
Resource
win10v2004-20220901-en
General
-
Target
518addc1ded0c14ad89604303cb9470ca04702948932b662b64917592dca9a71
-
Size
328KB
-
MD5
16e86911da05625235cf8576b9692ac0
-
SHA1
3f339895b0a7d80bb0849db0c8095c0bb35dace6
-
SHA256
518addc1ded0c14ad89604303cb9470ca04702948932b662b64917592dca9a71
-
SHA512
e566feac4f6b9c2ca7099fb1c01121c966d4dc875a66a15f7c93581a45704d332afd6ea7a1554b0557acbce90b25cd881220e8364068422b37cf5ecc6bec76fc
-
SSDEEP
6144:7kmEbxWg1fj/HjQwXec6pcY8nXBweUguKpEPLTRCF5Bs/se:7krbIg1fR6pV8n++OAPe
Malware Config
Signatures
Files
-
518addc1ded0c14ad89604303cb9470ca04702948932b662b64917592dca9a71.exe windows x86
5b291afdc25930a1ab609a7fbba9b86e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBkMode
CreateDIBSection
SetBkColor
RectVisible
BeginPath
CreateRectRgnIndirect
CreateBitmap
EndPath
Rectangle
SetTextColor
CreatePalette
GetRgnBox
RealizePalette
EndPage
RoundRect
CreateCompatibleBitmap
CreateDCW
GetDeviceCaps
GetTextExtentPoint32W
SelectClipRgn
DPtoLP
StartPage
GetObjectW
MoveToEx
DeleteObject
CreateCompatibleDC
CreateSolidBrush
GetViewportExtEx
IntersectClipRect
SetROP2
CombineRgn
SetBkMode
EndDoc
DeleteDC
BitBlt
PatBlt
SetWindowOrgEx
user32
PtInRect
RedrawWindow
DeleteMenu
DestroyMenu
UnregisterClassW
InflateRect
GetSysColor
GetNextDlgTabItem
SetCapture
SetCursor
SetParent
DefWindowProcW
GetScrollInfo
SetMenuItemInfoW
ScreenToClient
TranslateMessage
ShowOwnedPopups
GetWindowRect
GetSysColorBrush
RegisterClassExW
MapWindowPoints
BeginDeferWindowPos
LoadImageW
PostQuitMessage
ShowWindow
GetMenuItemID
GetMenu
GetDesktopWindow
InvalidateRect
GetSystemMetrics
GetMenuItemInfoW
TrackPopupMenuEx
ClientToScreen
BeginPaint
DrawIconEx
WindowFromPoint
LoadIconW
CloseClipboard
CreateWindowExW
SetMenuDefaultItem
GetMenuStringW
IsZoomed
LoadMenuW
GetWindowLongA
FillRect
IsChild
GetMenuState
SetClipboardData
GetWindow
SetPropW
DrawTextW
RemovePropW
BringWindowToTop
GetWindowDC
TabbedTextOutW
GetDlgItem
GetNextDlgGroupItem
GetKeyState
GetMenuDefaultItem
AppendMenuW
GetAncestor
SetActiveWindow
MoveWindow
GetParent
GetForegroundWindow
GetCapture
IsDialogMessageW
DestroyIcon
GetPropW
GetClassNameW
GetMessagePos
CharUpperW
EndDeferWindowPos
GetCursorPos
UpdateWindow
PostMessageW
CallNextHookEx
EndDialog
IsWindowVisible
SetRect
ReleaseCapture
SetFocus
CreatePopupMenu
GetSubMenu
SystemParametersInfoW
TrackPopupMenu
ShowScrollBar
SetWindowPos
GetActiveWindow
GetWindowLongW
SetCursorPos
GetWindowThreadProcessId
CopyIcon
LoadStringW
DrawFocusRect
GetSystemMenu
IntersectRect
GrayStringW
IsWindowEnabled
EmptyClipboard
SetTimer
RegisterClassW
wsprintfW
SendMessageW
OffsetRect
GetWindowPlacement
DestroyWindow
AdjustWindowRectEx
LoadBitmapW
RegisterWindowMessageW
DestroyAcceleratorTable
SystemParametersInfoA
IsWindow
KillTimer
MessageBoxW
LoadCursorW
AttachThreadInput
GetUpdateRect
EndPaint
ReleaseDC
IsMenu
MapDialogRect
EnableMenuItem
TrackMouseEvent
ole32
CoUninitialize
OleLockRunning
OleRegEnumVerbs
CoInitialize
RevokeDragDrop
CLSIDFromString
StringFromCLSID
OleRegGetMiscStatus
RegisterDragDrop
OleFlushClipboard
DoDragDrop
CoCreateGuid
IsAccelerator
OleIsCurrentClipboard
OleTranslateAccelerator
CoTaskMemAlloc
CoGetClassObject
OleRun
CoGetMalloc
OleInitialize
ReleaseStgMedium
CreateStreamOnHGlobal
CLSIDFromProgID
CoCreateInstance
StgCreateDocfile
OleDestroyMenuDescriptor
StringFromGUID2
CoRevokeClassObject
OleCreateMenuDescriptor
CoLockObjectExternal
shell32
ShellExecuteA
SHAppBarMessage
SHGetPathFromIDListA
SHBrowseForFolderA
DragAcceptFiles
ord155
kernel32
GetModuleHandleW
HeapCreate
WideCharToMultiByte
ReadFile
TlsAlloc
HeapFree
GetCurrentProcessId
GetCurrentThreadId
LCMapStringA
GetStartupInfoW
GetStdHandle
GetEnvironmentStrings
EnterCriticalSection
HeapAlloc
GetLastError
GetEnvironmentStringsW
ExitProcess
QueryPerformanceCounter
GetACP
MultiByteToWideChar
IsBadWritePtr
TlsGetValue
IsBadReadPtr
InitializeCriticalSection
GetStringTypeW
GetStartupInfoA
LoadLibraryW
GetCommandLineW
VirtualFree
DebugBreak
TerminateProcess
InterlockedDecrement
HeapValidate
WriteFile
RtlUnwind
OutputDebugStringA
SetFilePointer
GetSystemTimeAsFileTime
GetVersionExA
HeapReAlloc
GetCurrentProcess
InterlockedIncrement
UnhandledExceptionFilter
GetLocaleInfoA
FreeEnvironmentStringsW
SetLastError
GetModuleFileNameA
SetHandleCount
LoadLibraryA
FlushFileBuffers
CloseHandle
TlsSetValue
GetDateFormatA
VirtualProtect
SetStdHandle
GetOEMCP
GetCPInfo
SetEnvironmentVariableA
GetModuleFileNameW
GetSystemInfo
CompareStringW
SetUnhandledExceptionFilter
GetStringTypeA
CompareStringA
GetFileType
GetTimeFormatA
LCMapStringW
InterlockedExchange
VirtualAlloc
IsBadCodePtr
GetModuleHandleA
HeapDestroy
GetCommandLineA
FreeEnvironmentStringsA
LeaveCriticalSection
CreateMutexW
GetTimeZoneInformation
GetTickCount
GetProcAddress
DeleteCriticalSection
RaiseException
TlsFree
VirtualQuery
wininet
InternetGetConnectedState
InternetCloseHandle
HttpAddRequestHeadersA
HttpSendRequestA
InternetAutodialHangup
InternetReadFile
InternetOpenA
InternetConnectA
FtpPutFileA
FtpCreateDirectoryA
HttpOpenRequestA
comctl32
ImageList_LoadImageA
ImageList_Add
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_Remove
ImageList_Destroy
ImageList_DragEnter
ImageList_GetIcon
ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_AddMasked
ord17
ImageList_DragMove
ImageList_DrawEx
ImageList_SetBkColor
ImageList_Draw
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_DragLeave
_TrackMouseEvent
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_EndDrag
PropertySheetA
Sections
.text Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ