Static task
static1
Behavioral task
behavioral1
Sample
457d3ded5e8d1dc1c49cf468c03743735c05fb0e7bea643380c5f9e02064f67c.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
457d3ded5e8d1dc1c49cf468c03743735c05fb0e7bea643380c5f9e02064f67c.exe
Resource
win10v2004-20220414-en
General
-
Target
457d3ded5e8d1dc1c49cf468c03743735c05fb0e7bea643380c5f9e02064f67c
-
Size
352KB
-
MD5
1326d2b63d8846f40cddb4971ac57782
-
SHA1
a023a792e93e936dd0b297fdf680fb429e46ee41
-
SHA256
457d3ded5e8d1dc1c49cf468c03743735c05fb0e7bea643380c5f9e02064f67c
-
SHA512
56b2f907e45ec0418436430090807b12c7fde920a8cd3f065a08f18208b5be92af64bdb56069973996933dcb57e1ac7f123e724b71e71b7dad4894047f9089ca
-
SSDEEP
6144:087mvUe+5ZApYUlfwatyikEIiBG2tNPlj7vvV/smO87OO7XSHqEtGLGv9ohFLG1b:37mMeC7Uh7k6BLXdPFvOOTShGPhtG19H
Malware Config
Signatures
Files
-
457d3ded5e8d1dc1c49cf468c03743735c05fb0e7bea643380c5f9e02064f67c.exe windows x86
845dcefacb7a68431f6b2507d389b82e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetHandleInformation
FindFirstChangeNotificationW
GetStartupInfoA
GetModuleHandleA
gdi32
Rectangle
CreateBitmap
EnumFontFamiliesExW
PlayEnhMetaFile
CreateDIBPatternBrushPt
ExtEscape
CreateDCW
PtVisible
ExtCreateRegion
SetDIBColorTable
RestoreDC
GetClipRgn
GetDIBColorTable
SetPixelFormat
GetTextExtentPoint32W
StartPage
CreateFontW
DPtoLP
SetBkColor
CreateRectRgn
SetViewportOrgEx
GetTextMetricsA
GetKerningPairsA
SetWindowExtEx
CreatePenIndirect
Pie
GetRgnBox
DeleteDC
SaveDC
BitBlt
CreateSolidBrush
CreateDIBSection
ScaleWindowExtEx
UnrealizeObject
CreateFontA
PlayEnhMetaFileRecord
GetDeviceCaps
GetMapMode
LPtoDP
SelectClipRgn
Polyline
GetGlyphOutlineA
CloseEnhMetaFile
GetBrushOrgEx
EnumMetaFile
GdiFlush
EndDoc
GetEnhMetaFilePaletteEntries
FillPath
CancelDC
SetStretchBltMode
CreateEllipticRgn
GetGlyphOutlineW
GetObjectType
SetBitmapBits
EnumFontFamiliesA
CreateDCA
OffsetWindowOrgEx
GetSystemPaletteEntries
ResizePalette
ExtCreatePen
MoveToEx
CopyEnhMetaFileW
CreateICA
advapi32
RegQueryInfoKeyW
ImpersonateSelf
CreateProcessAsUserA
CreateServiceA
BuildExplicitAccessWithNameA
GetSecurityDescriptorDacl
SetSecurityDescriptorGroup
GetUserNameW
ReportEventW
GetSidSubAuthority
GetFileSecurityW
RevertToSelf
OpenServiceA
RegRestoreKeyW
LsaQueryInformationPolicy
QueryServiceStatus
CreateProcessAsUserW
RegQueryInfoKeyA
ChangeServiceConfigA
DeleteService
AdjustTokenPrivileges
OpenSCManagerW
ChangeServiceConfigW
GetKernelObjectSecurity
RegCreateKeyExW
ChangeServiceConfig2W
RegConnectRegistryA
GetSidSubAuthorityCount
LsaFreeMemory
RegCreateKeyExA
ReportEventA
RegOpenKeyExA
RegQueryValueA
QueryServiceConfigW
AddAce
SetEntriesInAclW
GetAce
RegOverridePredefKey
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
RegSetValueExA
LookupPrivilegeValueW
InitiateSystemShutdownA
RegSetValueExW
GetLengthSid
GetAclInformation
InitializeSecurityDescriptor
LsaOpenPolicy
RegEnumKeyExA
user32
SendMessageA
GetMenuState
DialogBoxIndirectParamW
SetForegroundWindow
DdeQueryStringA
wvsprintfA
GetWindowModuleFileNameA
InsertMenuA
mouse_event
CopyImage
LockWindowUpdate
CharUpperBuffW
DestroyCursor
EnableWindow
SendDlgItemMessageW
SetCaretBlinkTime
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_heapused
atol
_onexit
__dllonexit
fwprintf
memchr
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ