Static task
static1
Behavioral task
behavioral1
Sample
5412d52952b8fd1b8531086e284c51e19ae59c6a9abf8abd03eb2ef2e3ebd387.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5412d52952b8fd1b8531086e284c51e19ae59c6a9abf8abd03eb2ef2e3ebd387.exe
Resource
win10v2004-20221111-en
General
-
Target
5412d52952b8fd1b8531086e284c51e19ae59c6a9abf8abd03eb2ef2e3ebd387
-
Size
664KB
-
MD5
199dc0b4e35c440ee8dff897416c1b90
-
SHA1
99b95bce11f56a017066b6364eddafb50721436d
-
SHA256
5412d52952b8fd1b8531086e284c51e19ae59c6a9abf8abd03eb2ef2e3ebd387
-
SHA512
6b9193ef19888267ec52db463c69ce6662552d14650105deaf05aef6e13639e9f9ba504546890ec47d4fe4d0789a557254b89b40bcbcd1f7d9469900398c59ea
-
SSDEEP
12288:aS4+5GwAiFH42gx//I+X/+EFnZKIdPu2wvH2LD/2CsGTXv:v/axI+miwIdcvH6K
Malware Config
Signatures
Files
-
5412d52952b8fd1b8531086e284c51e19ae59c6a9abf8abd03eb2ef2e3ebd387.exe windows x86
a1c8773b50e9aa41dadbc57832862515
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ResizePalette
PtVisible
GetDCOrgEx
GetMapMode
PolylineTo
GetStockObject
SetROP2
SetArcDirection
SetPolyFillMode
CreateFontA
CreateCompatibleDC
Rectangle
OffsetViewportOrgEx
SetTextAlign
SetStretchBltMode
StretchDIBits
SetPaletteEntries
SetViewportOrgEx
SetBkMode
LPtoDP
CreateRectRgn
StartPage
CreatePenIndirect
Chord
SetRectRgn
EndDoc
CopyMetaFileA
CreateHalftonePalette
LineTo
Polyline
EndPage
PlayEnhMetaFile
GetViewportExtEx
GetBkMode
PaintRgn
CreateRoundRectRgn
ExtTextOutA
FlattenPath
ExcludeClipRect
GetFontData
GetRegionData
PolyBezierTo
CreateBrushIndirect
SetMapMode
RoundRect
SetTextJustification
GetDeviceCaps
GetBitmapBits
GetGlyphOutlineA
CreateEllipticRgnIndirect
GetPath
BitBlt
Ellipse
PolyBezier
DeleteDC
GetNearestColor
SelectClipRgn
RectInRegion
SetBoundsRect
FillRgn
GetTextMetricsA
SetWindowOrgEx
ole32
CoCreateInstance
OleGetClipboard
OleInitialize
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoInitialize
RevokeDragDrop
CoDisconnectObject
OleIsCurrentClipboard
CoMarshalInterThreadInterfaceInStream
OleDuplicateData
CoGetInterfaceAndReleaseStream
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleUninitialize
CoLockObjectExternal
CoTaskMemAlloc
OleLockRunning
ReleaseStgMedium
CoGetClassObject
CoUninitialize
StgOpenStorageOnILockBytes
RegisterDragDrop
oleaut32
LoadTypeLi
comctl32
DestroyPropertySheetPage
ImageList_GetIconSize
PropertySheetW
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Destroy
ImageList_Draw
ImageList_GetIcon
ImageList_GetImageInfo
ord17
ImageList_Create
CreateStatusWindowW
InitCommonControlsEx
ImageList_AddMasked
CreatePropertySheetPageW
user32
EnableMenuItem
IsWindowEnabled
GetCursorPos
SetWindowTextW
SetForegroundWindow
RegisterClassW
GetWindowPlacement
GetDC
GetSysColorBrush
GetClientRect
LoadIconW
EnableWindow
GetMenuStringW
SetActiveWindow
DrawIconEx
BringWindowToTop
GetSystemMetrics
GetKeyState
PostMessageW
LockWindowUpdate
GetDoubleClickTime
ShowWindow
GetKeyNameTextW
ReleaseCapture
SetMenuDefaultItem
GetWindowTextW
LoadCursorW
DrawFocusRect
CreateWindowExW
SendMessageW
RegisterClassExW
FillRect
GetWindow
MessageBoxW
DispatchMessageW
DefWindowProcW
CopyRect
GetCapture
DrawTextW
GetClassNameW
EndDialog
ClientToScreen
TrackPopupMenu
DestroyMenu
GetSysColor
GetActiveWindow
DestroyWindow
SetCapture
GetWindowRect
DrawFrameControl
LoadStringW
MoveWindow
BeginDeferWindowPos
IsDialogMessageW
TranslateMessage
IsWindow
EndDeferWindowPos
comdlg32
GetFileTitleA
GetSaveFileNameA
kernel32
DeleteCriticalSection
UnhandledExceptionFilter
SetFilePointer
HeapAlloc
GetLocaleInfoW
VirtualProtect
GetProcessHeap
LeaveCriticalSection
LCMapStringW
IsValidLocale
GetCommandLineA
GetStdHandle
SetLastError
GetVersionExA
CompareStringA
IsBadReadPtr
GetCurrentProcess
FreeEnvironmentStringsW
SetStdHandle
CreateMutexW
GetOEMCP
MoveFileW
GetLocaleInfoA
VirtualQuery
QueryPerformanceCounter
MultiByteToWideChar
EnterCriticalSection
GetModuleHandleA
GetStringTypeW
TlsGetValue
GetACP
SetEnvironmentVariableA
GetCPInfo
FlushFileBuffers
IsValidCodePage
GlobalFree
HeapSize
GetDateFormatA
RtlUnwind
HeapFree
GetModuleFileNameW
InitializeCriticalSection
VirtualAlloc
WriteFile
LCMapStringA
CloseHandle
SetUnhandledExceptionFilter
IsBadWritePtr
GetUserDefaultLCID
GetEnvironmentStringsW
GetTimeZoneInformation
TlsFree
GetCommandLineW
TerminateProcess
ExitProcess
GetTimeFormatA
GetSystemInfo
VirtualFree
GetProcAddress
GetSystemTimeAsFileTime
HeapReAlloc
GetModuleFileNameA
WideCharToMultiByte
FreeEnvironmentStringsA
GetStartupInfoA
HeapDestroy
GetCurrentThread
HeapCreate
TlsAlloc
GetCurrentProcessId
GetModuleHandleW
GetLastError
GetStartupInfoW
ReadFile
CompareStringW
GetEnvironmentStrings
GetFileType
TlsSetValue
RaiseException
LoadLibraryA
GetStringTypeA
GetTickCount
FatalAppExitA
GetThreadLocale
SetHandleCount
InterlockedExchange
SetConsoleCtrlHandler
IsBadCodePtr
GetCurrentThreadId
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 464KB - Virtual size: 461KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ