Static task
static1
Behavioral task
behavioral1
Sample
4d478d444633614431e232d8c11a9425cab39a7109e1fad8b470cf55ed2c1b4d.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4d478d444633614431e232d8c11a9425cab39a7109e1fad8b470cf55ed2c1b4d.exe
Resource
win10v2004-20220414-en
General
-
Target
4d478d444633614431e232d8c11a9425cab39a7109e1fad8b470cf55ed2c1b4d
-
Size
439KB
-
MD5
a7deb18758c9f922fbe6b532bdd0ba2c
-
SHA1
eb13ae29cc736d77b3b29e0c16101d049f5671f8
-
SHA256
4d478d444633614431e232d8c11a9425cab39a7109e1fad8b470cf55ed2c1b4d
-
SHA512
e6efa55bae81f7802e59d707110e018c41fda04ec8bc19c7b3edc353788377e0019e386d526ae5af8a36fdd18a2f0c606c32008787a4ef594fd21423cd6b6276
-
SSDEEP
12288:Ie5Rpg7nGs7gu0ry5LxTLi+p4u+6eDSL:hbu7f+yNwGm6k
Malware Config
Signatures
Files
-
4d478d444633614431e232d8c11a9425cab39a7109e1fad8b470cf55ed2c1b4d.exe windows x86
25e970dd428c1d72dd0afe1582e606f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InvalidateRect
GetWindowRect
CreateWindowExA
wsprintfA
SendMessageA
DestroyWindow
DefWindowProcA
MessageBoxA
PostQuitMessage
EndPaint
InsertMenuItemA
RegisterClassExA
LoadCursorA
LoadIconA
TranslateMessage
DispatchMessageA
GetMessageA
GetDesktopWindow
LoadBitmapA
DestroyCursor
HideCaret
LockWindowUpdate
OpenClipboard
GetClassNameW
GetWindowPlacement
MapWindowPoints
ModifyMenuW
InflateRect
GetCursorPos
DestroyIcon
GetActiveWindow
GetWindowTextA
GetWindowLongA
SetDlgItemTextA
BeginPaint
InsertMenuA
kernel32
GetProcessHeap
HeapAlloc
GetCommandLineA
SetLastError
ExitProcess
GetCurrentDirectoryA
GetModuleHandleA
GetTickCount
GetLastError
CreateFileA
CreateFileMappingA
CloseHandle
MapViewOfFile
WriteFile
GetStartupInfoA
Sections
.text Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ