Static task
static1
Behavioral task
behavioral1
Sample
5a253f455c02778d04ea947d5e97f0557c556aa3f5c87a200b4299b1985754d8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5a253f455c02778d04ea947d5e97f0557c556aa3f5c87a200b4299b1985754d8.exe
Resource
win10v2004-20220812-en
General
-
Target
5a253f455c02778d04ea947d5e97f0557c556aa3f5c87a200b4299b1985754d8
-
Size
1.3MB
-
MD5
74e0552e9fb3942ca3d4434264cbf09c
-
SHA1
7905f0e8fe761ea41c959220c4c49cf9d54dd227
-
SHA256
5a253f455c02778d04ea947d5e97f0557c556aa3f5c87a200b4299b1985754d8
-
SHA512
b9c154fbbf7f3a2536e04c9c088748fb75422ea08f3624c689e5abc1427a36505deb3e0124970fa21972c20446c4c8ad190bc1bb76b86e4dbc289f2b9a04b59c
-
SSDEEP
24576:5XQoUXrZRnKFuvtcpVAnsPqcyV/i5uyAWg2rYH3gSTmXtOXH2XWYxfFRNL4thPpk:qZmSuWEqBVN5d8hZ0YxfMvGE4C
Malware Config
Signatures
Files
-
5a253f455c02778d04ea947d5e97f0557c556aa3f5c87a200b4299b1985754d8.exe windows x86
bba1040a93f9e15ecf110ae0a3e408d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
ReleaseMutex
lstrcatA
GetWindowsDirectoryA
lstrcpyA
GetLocalTime
GetTickCount
GetLastError
CreateMutexA
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
VirtualAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
WriteFile
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
LCMapStringW
ReadFile
CloseHandle
GetTempPathA
FindResourceA
SizeofResource
LoadResource
LockResource
DeleteFileA
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalFree
WideCharToMultiByte
GlobalUnlock
user32
LoadMenuA
GetSubMenu
LoadCursorA
RegisterClassExA
CreateWindowExA
SystemParametersInfoA
LoadImageA
UpdateWindow
CopyIcon
GetMessageA
TranslateMessage
DispatchMessageA
CheckMenuItem
LoadIconA
MoveWindow
SetRect
DefWindowProcA
GetAsyncKeyState
SetWindowPos
DialogBoxParamA
PostQuitMessage
MessageBoxA
EnableMenuItem
SetForegroundWindow
GetCursorPos
TrackPopupMenu
GetDlgItem
SendMessageA
SendDlgItemMessageA
SetWindowTextA
SetFocus
KillTimer
EndDialog
GetDlgItemTextA
CallWindowProcA
SetCursor
GetWindowTextA
BeginPaint
GetSysColor
EndPaint
SetTimer
SetWindowRgn
InvalidateRect
GetDC
GetWindowRect
ReleaseDC
GetWindowLongA
SetWindowLongA
ShowWindow
gdi32
CreateDIBSection
CreateCompatibleDC
GetObjectA
TextOutA
SelectObject
SetBkColor
SetTextColor
CreateFontIndirectA
BitBlt
CombineRgn
ExtCreateRegion
SetBkMode
DeleteDC
DeleteObject
advapi32
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
shell32
ShellExecuteA
Shell_NotifyIconA
winmm
timeGetTime
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ