Static task
static1
Behavioral task
behavioral1
Sample
395849c64079276b51af00f2fda2f417a319fbd441c4188fdeadaa42fb0f2845.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
395849c64079276b51af00f2fda2f417a319fbd441c4188fdeadaa42fb0f2845.exe
Resource
win10v2004-20220414-en
General
-
Target
395849c64079276b51af00f2fda2f417a319fbd441c4188fdeadaa42fb0f2845
-
Size
175KB
-
MD5
9f4e6349382ad42a33a4ae6e56894808
-
SHA1
bab23417b288e253257fec2c50ca9b50055bb38a
-
SHA256
395849c64079276b51af00f2fda2f417a319fbd441c4188fdeadaa42fb0f2845
-
SHA512
2208a146bfdfb659c0681706c977deaa1ecd957897804e168e1464a2a27c03efb406f59969e0faf66311eac707151bc8e86e57af852791d0084bdfd07e969efe
-
SSDEEP
3072:EyI4PUF98f9HhqXLBsulfOndaMYTPOpUOW7bp9bcKiQkzYbbJVZlBGIpyTOPh79Z:EF4PUF981Hh+sul1DOKLgKiSBthJZ
Malware Config
Signatures
Files
-
395849c64079276b51af00f2fda2f417a319fbd441c4188fdeadaa42fb0f2845.exe windows x86
884e2ece25f3a28a1029297d98d59e27
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
FreeEnvironmentStringsW
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
LCMapStringW
GetStringTypeW
Sleep
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
EncodePointer
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
ExitProcess
GetModuleHandleW
GetProcAddress
RtlUnwind
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetModuleFileNameA
GetLastError
MultiByteToWideChar
HeapCreate
GetConsoleWindow
CreateEventA
EnumTimeFormatsA
GetProcessHeap
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
HeapAlloc
LoadResource
FindResourceExW
user32
RegisterClassA
UpdateWindow
GetDlgItemTextA
SetWindowTextA
LoadCursorA
BeginDeferWindowPos
AppendMenuA
GetSystemMenu
SetTimer
SendDlgItemMessageA
KillTimer
LoadBitmapA
LoadIconA
CreateMenu
SetFocus
SendMessageA
BeginPaint
GetDC
ShowCursor
GetWindowTextA
SetPropA
GetKeyboardLayout
CreateIcon
MessageBoxA
CreateWindowExA
ReleaseDC
EnableMenuItem
GetDlgItem
EndDialog
DefWindowProcA
GetSysColor
ShowWindow
IsDlgButtonChecked
DrawMenuBar
gdi32
Polyline
CreatePen
CreateCompatibleDC
SetDCPenColor
BeginPath
MoveToEx
BitBlt
CreateHatchBrush
DeleteDC
GetDeviceCaps
SetBkColor
AngleArc
SetPixel
DeleteObject
SelectObject
Ellipse
CreateCompatibleBitmap
Rectangle
GetStockObject
advapi32
RegCloseKey
ole32
CoCreateInstance
odbc32
ord12
ord16
ord19
ord9
ord13
ord1
ord41
ord2
ord31
ord3
avifil32
AVIMakeCompressedStream
AVISaveOptions
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
shlwapi
PathUnExpandEnvStringsA
PathUnmakeSystemFolderA
PathUnquoteSpacesA
StrToIntExA
comctl32
ImageList_SetDragCursorImage
ImageList_Create
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_Add
ImageList_Merge
ImageList_Destroy
ImageList_ReplaceIcon
pdh
PdhBrowseCountersA
rpcrt4
RpcErrorAddRecord
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
setupapi
SetupDiGetClassDevsA
powrprof
GetPwrCapabilities
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ