Static task
static1
Behavioral task
behavioral1
Sample
4a972144600d364684e75cdb6e34d74cba51661f6872bbc3e41c25425fff3ebb.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4a972144600d364684e75cdb6e34d74cba51661f6872bbc3e41c25425fff3ebb.exe
Resource
win10v2004-20220414-en
General
-
Target
4a972144600d364684e75cdb6e34d74cba51661f6872bbc3e41c25425fff3ebb
-
Size
372KB
-
MD5
76dcea66375fd47b13e624efdd11d888
-
SHA1
6690c6f0c0f68a1da2b0fba75c25503ca9a9d1e0
-
SHA256
4a972144600d364684e75cdb6e34d74cba51661f6872bbc3e41c25425fff3ebb
-
SHA512
73b686abde3a0e6260e13e6921b75377ab8fa15739f959160dfb82a4b7ced928d01cf7e45d97727046bf8075b233d16c13756bf422f9e95cc35c4ec81453a619
-
SSDEEP
6144:H/3ciCwuvvmWkia8UViNpBaLwKICVt1YSHkmaAJVaPzVcxwL31Un+phNz9+UD:fsiCwuv+NZlLHVthEmJJV6z6x8UOhN9X
Malware Config
Signatures
Files
-
4a972144600d364684e75cdb6e34d74cba51661f6872bbc3e41c25425fff3ebb.exe windows x86
424d54965a7a1e60ee0651386c19138f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetServiceDisplayNameA
CreateProcessAsUserA
SetServiceObjectSecurity
user32
CharNextA
BeginDeferWindowPos
WinHelpW
CloseClipboard
GetWindowWord
ShowWindow
RegisterClassExW
CloseWindow
SystemParametersInfoA
SetWindowTextW
GetClassInfoW
GetKeyNameTextW
SetCaretPos
SetDlgItemTextW
SetWindowLongW
GetKeyState
GetNextDlgTabItem
DrawTextExA
DefFrameProcW
SetClassLongW
GetClipboardData
SetWindowPlacement
UnpackDDElParam
LoadBitmapA
ShowScrollBar
ShowCursor
DrawStateA
PostMessageA
CharNextW
EnableScrollBar
DdeConnect
SetTimer
DestroyCursor
DefWindowProcA
LoadStringW
GetQueueStatus
ShowOwnedPopups
DrawIconEx
CharToOemA
CreateDialogIndirectParamW
CreateWindowStationW
MoveWindow
GetClassInfoExW
LockWindowUpdate
ScrollWindowEx
EnumDisplaySettingsW
CreateMenu
GetMessageExtraInfo
TrackPopupMenuEx
TranslateAcceleratorA
GetClipboardFormatNameW
IsMenu
mouse_event
TranslateMessage
GetKeyboardLayoutNameW
LoadIconA
SendNotifyMessageW
GetParent
CallWindowProcA
WinHelpA
FindWindowW
SetKeyboardState
ScrollWindow
IsDlgButtonChecked
GetScrollPos
SetCaretBlinkTime
SetMenuDefaultItem
GrayStringW
RemovePropA
DialogBoxIndirectParamW
MapWindowPoints
PeekMessageW
InvalidateRect
IsClipboardFormatAvailable
CheckMenuItem
CreateDialogIndirectParamA
GetScrollRange
GetScrollInfo
CheckRadioButton
GetClassLongA
GetWindowTextLengthA
LoadKeyboardLayoutW
CharLowerA
GetWindowLongW
GetDlgItemInt
IntersectRect
GetDlgCtrlID
CharLowerW
GetSysColor
MessageBoxExW
MessageBeep
CharLowerBuffA
ReuseDDElParam
EmptyClipboard
DdeAccessData
CallMsgFilterA
ChangeDisplaySettingsA
GetMessageA
GetMenuItemCount
AppendMenuW
ValidateRect
IsIconic
GetDlgItemTextW
GetSystemMetrics
GetMenuItemID
InsertMenuW
InSendMessage
DdeConnectList
SetForegroundWindow
SetClipboardData
LoadMenuA
GetKeyboardState
GetPropA
OemToCharBuffA
ModifyMenuA
SetFocus
CopyImage
GetCaretPos
ChildWindowFromPointEx
GetUserObjectInformationW
SetRect
GetClassNameW
GetDlgItem
SystemParametersInfoW
IsWindowEnabled
GetCapture
DispatchMessageW
ShowCaret
VkKeyScanExW
SetCapture
WindowFromPoint
BringWindowToTop
GetWindowRect
EnumThreadWindows
PtInRect
SetWinEventHook
IsCharLowerA
FindWindowExW
rasapi32
RasEnumConnectionsA
msvcrt
__getmainargs
_setmbcp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_wsystem
__dllonexit
_onexit
acos
_mbsspnp
abs
_acmdln
_initterm
imagehlp
BindImage
mpr
WNetCancelConnectionA
WNetAddConnection3A
WNetAddConnectionA
WNetDisconnectDialog1A
lz32
LZClose
kernel32
GlobalFix
GlobalCompact
EnumResourceLanguagesA
GetModuleHandleA
GetStartupInfoA
gdi32
OffsetRgn
ResetDCW
GetGlyphOutlineW
ExtCreateRegion
StartDocW
GetWindowOrgEx
ExtEscape
GetTextMetricsA
ScaleViewportExtEx
GetDIBits
CreatePenIndirect
LPtoDP
GetObjectA
GetWorldTransform
Polyline
SetTextCharacterExtra
StrokePath
OffsetViewportOrgEx
SetPolyFillMode
SetWindowOrgEx
SetRectRgn
DeleteEnhMetaFile
CopyEnhMetaFileW
GdiFlush
DeleteDC
StartPage
RectVisible
EndPage
GetTextFaceA
PolyBezier
PatBlt
EnumFontsW
EqualRgn
PolyPolyline
DPtoLP
GetWinMetaFileBits
DeleteObject
SwapBuffers
GetEnhMetaFileBits
SetPixel
CreateDIBSection
GetTextMetricsW
CopyEnhMetaFileA
GetBitmapBits
ExtSelectClipRgn
BitBlt
GetBrushOrgEx
GetROP2
Pie
Chord
SetPixelV
PolyDraw
GetEnhMetaFileHeader
GetTextExtentPoint32A
CreateICA
GetTextAlign
SetArcDirection
EndDoc
FillRgn
CreateEllipticRgn
SetBkMode
SetBitmapBits
SetWorldTransform
Arc
CreateCompatibleDC
RemoveFontResourceA
GetMapMode
GetTextExtentPointA
MoveToEx
ResizePalette
CreateDCA
GetKerningPairsA
GetTextCharsetInfo
DeleteColorSpace
SetMetaFileBitsEx
IntersectClipRect
SaveDC
ExtCreatePen
SetTextColor
SetViewportExtEx
CreateEnhMetaFileA
CreateMetaFileA
PlayEnhMetaFile
GetDIBColorTable
GetEnhMetaFilePaletteEntries
Rectangle
CreateFontW
SetColorAdjustment
SetAbortProc
CreatePen
CreateDCW
GetRgnBox
SetWinMetaFileBits
GetBkColor
SetDeviceGammaRamp
GetGlyphOutlineA
FillPath
GetNearestPaletteIndex
SetTextAlign
EndPath
AbortDoc
GetStockObject
StartDocA
GetCharWidthA
EnumMetaFile
mfc42
ord3825
ord3831
ord3830
ord3401
ord2976
ord3081
ord2985
ord3262
ord1049
ord4465
ord3259
ord1049
ord2982
ord3953
ord5714
ord1052
ord3079
ord4698
ord1055
ord2725
ord5302
ord1064
ord3346
ord2396
ord1030
ord1089
ord3922
ord5731
ord1018
ord2554
ord4486
ord6375
ord815
ord1576
ord4080
ord1019
ord4424
ord3738
ord561
ord5307
ord1168
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ