Static task
static1
Behavioral task
behavioral1
Sample
558b88891d8e6757b32e1bbd6d93c7114db4ac80164720efb0b39069e85baf49.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
558b88891d8e6757b32e1bbd6d93c7114db4ac80164720efb0b39069e85baf49.exe
Resource
win10v2004-20221111-en
General
-
Target
558b88891d8e6757b32e1bbd6d93c7114db4ac80164720efb0b39069e85baf49
-
Size
147KB
-
MD5
422319bd33f0c7776839c73754c4da79
-
SHA1
d6afc2a52fa799c3ba111b62d1d77a98bfc1b0b9
-
SHA256
558b88891d8e6757b32e1bbd6d93c7114db4ac80164720efb0b39069e85baf49
-
SHA512
5b996af48f4cca272ff3e633680997141d1c08f923462b669a49c4a98545423a854e58d3d0a7c4384a83bf3bf2edd333bdd9f4f356d0baeba11e86bf3ffb144a
-
SSDEEP
3072:u1t7njIVZPWSu8farFHIla9cshoFFJT70/Lxss26:u1Y68fardIgo9iLr26
Malware Config
Signatures
Files
-
558b88891d8e6757b32e1bbd6d93c7114db4ac80164720efb0b39069e85baf49.exe windows x86
284644db82c2225141e78c59efec1b99
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetPropA
BroadcastSystemMessage
GetSysColor
CallNextHookEx
CalcMenuBar
IsWindowUnicode
IsWindowVisible
LockWindowUpdate
EndTask
CascadeWindows
OpenClipboard
OemToCharW
GetTabbedTextExtentA
GetTabbedTextExtentW
OffsetRect
OpenInputDesktop
MonitorFromRect
TranslateMessage
MoveWindow
HideCaret
SetRectEmpty
IntersectRect
GetCaretPos
GetWindowWord
FlashWindow
ReleaseDC
GetAncestor
InsertMenuW
GetWindowRgn
IsWindowVisible
ShowCursor
GetWindowDC
GetWindowInfo
GetUpdateRect
GetUpdateRgn
onex
OneXAddEapAttributes
opengl32
glColor3b
glColor3bv
glColor3d
glColor3dv
glColor3f
glColor3fv
glColor3i
glColor3iv
glColor3s
kernel32
GetLastError
CreateFileA
GetWindowsDirectoryA
GetTickCount
ExitProcess
EnterCriticalSection
InitializeCriticalSection
VirtualFree
IsBadCodePtr
LocalFree
LocalAlloc
GetTickCount
_lread
SetSystemTime
IsValidCodePage
IsBadWritePtr
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
QueueUserAPC
SearchPathA
ExitProcess
PulseEvent
CreateThread
GetTempPathW
OpenThread
SetConsoleFont
SetCalendarInfoW
Process32Next
LeaveCriticalSection
SetConsolePalette
SetConsoleScreenBufferSize
msi
MsiCreateRecord
MsiApplyMultiplePatchesA
MsiApplyMultiplePatchesW
MsiApplyPatchA
MsiApplyPatchW
MsiCloseAllHandles
MsiCloseHandle
MsiCollectUserInfoA
MsiCollectUserInfoW
MsiConfigureFeatureA
MsiCreateRecord
MsiCreateRecord
MsiCreateRecord
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ