Static task
static1
Behavioral task
behavioral1
Sample
d05367e25168620364b9d578f973bb6d8c7d174f987d376e30848b6a63c69475.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d05367e25168620364b9d578f973bb6d8c7d174f987d376e30848b6a63c69475.exe
Resource
win10v2004-20220901-en
General
-
Target
d05367e25168620364b9d578f973bb6d8c7d174f987d376e30848b6a63c69475
-
Size
1.2MB
-
MD5
8544452c07f0d024cb5ab92198384670
-
SHA1
2265c973fe0aaaefb50027f2fff6af77a053da4a
-
SHA256
d05367e25168620364b9d578f973bb6d8c7d174f987d376e30848b6a63c69475
-
SHA512
e0dfc56b167e1d1ee020443684129b0b52d975a61c98b405a8c326f0be4548d936f9817d4739830071dda0f752040a277f78d387b5170cf45f9d034d6edb7627
-
SSDEEP
24576:S8tjzv6ZsSVVbnvZoytt2tDwa3m5d5pyJcevdeTR:Jt3zCVOQkDW5RyJbdO
Malware Config
Signatures
Files
-
d05367e25168620364b9d578f973bb6d8c7d174f987d376e30848b6a63c69475.exe windows x86
51913c755abe0813f65f53594b7391e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageWidth
GdipDeleteFont
GdipDeletePen
GdipCreatePen2
GdipGetSolidFillColor
GdipDeleteBrush
GdipGetImageHeight
GdipLoadImageFromStreamICM
GdiplusStartup
GdiplusShutdown
GdipCreateSolidFill
GdipCreateFont
GdipFree
GdipDrawRectangleI
GdipFillRectangleI
GdipMeasureString
GdipDrawImage
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipLoadImageFromStream
GdipCreateFontFromDC
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteGraphics
GdipAlloc
GdipCloneBrush
kernel32
GetCommandLineA
WriteFile
CreateFileW
LockResource
LoadResource
SizeofResource
FindResourceW
ReadFile
GetFileSize
GetModuleHandleW
ExpandEnvironmentStringsW
WaitForSingleObject
GetFileAttributesW
DeleteFileW
CreateDirectoryW
GetTempPathW
GetCurrentProcess
VirtualFree
VirtualAlloc
SetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ReleaseMutex
CreateProcessW
GetModuleFileNameW
CreateMutexW
SetFilePointer
OutputDebugStringA
FormatMessageA
GetModuleHandleA
LocalFree
GetCommandLineW
GetStdHandle
SetUnhandledExceptionFilter
GetProcAddress
CreateMutexA
TerminateProcess
GetSystemTimeAsFileTime
GetDiskFreeSpaceExW
QueryPerformanceCounter
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
MultiByteToWideChar
WideCharToMultiByte
Sleep
RaiseException
HeapAlloc
HeapFree
GetStartupInfoA
ExitProcess
UnhandledExceptionFilter
RtlUnwind
InitializeCriticalSection
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
HeapReAlloc
LCMapStringA
GetStringTypeA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
GetModuleFileNameA
LoadLibraryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
GetLastError
CloseHandle
CreateThread
GetSystemDefaultLangID
GetConsoleCP
GetConsoleMode
SetStdHandle
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
CreateFileA
CompareStringA
CompareStringW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
SetEnvironmentVariableA
GetFileType
user32
GetSystemMetrics
CreateWindowExW
SendMessageW
UpdateWindow
GetClientRect
GetWindowTextLengthW
LoadIconW
RegisterClassExW
BeginPaint
EndPaint
MessageBoxW
DestroyWindow
IsIconic
PostQuitMessage
GetMessageW
DispatchMessageW
TranslateMessage
FindWindowW
SetForegroundWindow
GetWindowTextW
SetWindowTextW
ShowWindow
InvalidateRect
PostMessageW
EnableWindow
LoadStringW
GetDC
LoadCursorW
DefWindowProcW
gdi32
CreateFontW
DeleteObject
TextOutW
SelectObject
ExtCreatePen
GetTextExtentPoint32W
CreateFontA
CreateSolidBrush
SetBkColor
SetBkMode
SetTextColor
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
CreateProcessAsUserW
shell32
CommandLineToArgvW
Shell_NotifyIconW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
ole32
CreateStreamOnHGlobal
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
winmm
timeGetTime
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25.2MB - Virtual size: 25.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ