Static task
static1
Behavioral task
behavioral1
Sample
5f81fbcea654113149a1f11b47252573afc6852a9e566923ed0bd1a3175e3f54.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5f81fbcea654113149a1f11b47252573afc6852a9e566923ed0bd1a3175e3f54.exe
Resource
win10v2004-20230220-en
General
-
Target
5f81fbcea654113149a1f11b47252573afc6852a9e566923ed0bd1a3175e3f54
-
Size
176KB
-
MD5
a9bcfde3c457a13ddc2b6418efa3f4d1
-
SHA1
69a0bc8b546085dcf650e7cb5be46d43bdd2f28e
-
SHA256
5f81fbcea654113149a1f11b47252573afc6852a9e566923ed0bd1a3175e3f54
-
SHA512
76779eee9b89c454f03e74834e53f665422aa60a7818e76fe830010186ddf4850706764c99fc10a3bc04ce8325c18aa18510f1eda1cf637c7738bb0bd2524921
-
SSDEEP
1536:lYpmSPnyajXTi+cArBNhjBf2+oogCrv6wzQ34QclkKg3oE+hDFfsAYQLPvi4oUT:mpZvvTTx1f2+oo3ryFj73+s0xo
Malware Config
Signatures
Files
-
5f81fbcea654113149a1f11b47252573afc6852a9e566923ed0bd1a3175e3f54.exe windows x86
2457498b4879ceb355ef49e90e6f4b7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetPriorityClass
FindResourceA
InitializeCriticalSection
SetEvent
LeaveCriticalSection
EnterCriticalSection
LockResource
LoadResource
GetCurrentProcess
CreateEventA
Sleep
WaitForSingleObject
ResetEvent
GetTickCount
GetStartupInfoA
TlsGetValue
SetLastError
LoadLibraryA
GetOEMCP
GetACP
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetCPInfo
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
GetModuleFileNameA
ReadFile
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
DeleteCriticalSection
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetCurrentThreadId
TlsAlloc
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
RtlUnwind
GetProcAddress
WriteFile
WideCharToMultiByte
GetFileType
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
SetFilePointer
CreateFileA
GetCurrentProcessId
user32
DispatchMessageA
TranslateMessage
ShowWindow
EndDialog
CheckRadioButton
SetWindowTextA
wsprintfA
GetWindowLongA
DialogBoxParamA
GetWindowRect
ScreenToClient
MoveWindow
GetKeyState
CallWindowProcA
IsWindowEnabled
SendMessageA
PostQuitMessage
GetDlgItem
SetWindowLongA
SetFocus
DefWindowProcA
EnableWindow
LoadCursorA
LoadIconA
RegisterClassA
MessageBoxA
CreateDialogParamA
GetSystemMenu
AppendMenuA
GetMessageA
UpdateWindow
comdlg32
GetOpenFileNameA
comctl32
ord17
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ