Static task
static1
Behavioral task
behavioral1
Sample
582a2cf10b2499b882ee50b41fadfe9bc5248d06ffcf6ab839cde2a92f1ad077.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
582a2cf10b2499b882ee50b41fadfe9bc5248d06ffcf6ab839cde2a92f1ad077.exe
Resource
win10v2004-20220812-en
General
-
Target
582a2cf10b2499b882ee50b41fadfe9bc5248d06ffcf6ab839cde2a92f1ad077
-
Size
165KB
-
MD5
1ae971576ebfbc21b8c5f2568e6a7d90
-
SHA1
b5be78783fadfff61de18c41c22d9988ed89e804
-
SHA256
582a2cf10b2499b882ee50b41fadfe9bc5248d06ffcf6ab839cde2a92f1ad077
-
SHA512
c3b6c5fb7ae6d910199b0d3b343f9d64cd9adf2ce62271c08bd4513c434529e96e80e3c07b7f72776c36db58aa75cace1af26b5c083b2e5ab451fdcfc810e6f0
-
SSDEEP
3072:wfB7+cCp5+wBH5mtS0acKbzZdNjN45BfDerimBForiFlDhwdBHav329A2OUL:WdCPhrmz4ZdNjt3OriFl9wdBHav32vO
Malware Config
Signatures
Files
-
582a2cf10b2499b882ee50b41fadfe9bc5248d06ffcf6ab839cde2a92f1ad077.exe windows x86
87397e22a06ee0e7f267e8a0d294152d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
user32
RegisterWindowMessageW
LoadCursorW
GetDlgItem
GetWindowTextW
SetMenuItemInfoW
GetActiveWindow
GetDlgCtrlID
InvalidateRect
SendMessageA
CreateDialogIndirectParamW
UnhookWindowsHookEx
GetDC
FindWindowW
GetWindowRect
LockSetForegroundWindow
SetWindowTextW
GetWindowPlacement
GetWindowThreadProcessId
InsertMenuW
DrawFocusRect
SetProcessDefaultLayout
SetForegroundWindow
LoadImageW
ShowWindow
GetWindowLongA
GetWindowDC
UnregisterClassA
SetWindowLongW
SetCapture
KillTimer
CloseClipboard
RedrawWindow
MessageBoxW
TranslateMessage
shlwapi
SHAutoComplete
PathAppendW
shell32
SHCreateShellItem
ord190
SHCreateQueryCancelAutoPlayMoniker
SHBrowseForFolderW
comctl32
ImageList_Destroy
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_AddMasked
ole32
CoTaskMemFree
CoUninitialize
CoGetClassObject
GetRunningObjectTable
CoResumeClassObjects
ntdll
NtOpenEventPair
NtOpenTimer
NtClearEvent
NtMapViewOfSection
NtOpenDirectoryObject
NtOpenMutant
NtQueryDirectoryFile
NtCreateSection
oleaut32
VarUI4FromStr
gdiplus
GdipBitmapUnlockBits
GdipCreateFontFromLogfontA
GdipSetWorldTransform
GdipDeletePen
GdipCreateSolidFill
GdipDisposeImage
GdipClosePathFigure
GdipScaleMatrix
GdipFree
GdipSetTextRenderingHint
GdipSetPathGradientCenterPoint
GdipGetGenericFontFamilySansSerif
GdipAlloc
GdipSetPenMode
GdipFillRectangle
GdipCreatePen1
GdipCreateBitmapFromFile
kernel32
GetVersion
FormatMessageW
OutputDebugStringA
SetUnhandledExceptionFilter
CreateEventW
FindClose
FindFirstVolumeW
InterlockedExchangeAdd
GetVersionExA
GetThreadPriority
GetVolumeNameForVolumeMountPointW
LocalAlloc
FlushInstructionCache
InitializeCriticalSection
lstrcmpW
Sleep
LeaveCriticalSection
InterlockedCompareExchange
CreateWaitableTimerA
CloseHandle
SetEvent
GetCurrentThreadId
SetLastError
GetVolumePathNamesForVolumeNameW
GetProcessHeap
InterlockedDecrement
GetCurrentProcessId
EnterCriticalSection
GetUserDefaultUILanguage
InterlockedExchange
lstrlenA
Sleep
WaitForSingleObject
VirtualProtectEx
QueryPerformanceCounter
gdi32
CreateSolidBrush
AddFontResourceW
PatBlt
GetObjectW
CreateCompatibleDC
GetStockObject
SelectObject
SetBrushOrgEx
msvcrt
_wtoi64
__set_app_type
iswspace
wcstoul
_controlfp
??2@YAPAXI@Z
realloc
__setusermatherr
exit
_wtof
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ