Static task
static1
Behavioral task
behavioral1
Sample
4845e632325c892c3da2de6fca61624f914f0f340643174bdd34b89b38cd7fa4.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4845e632325c892c3da2de6fca61624f914f0f340643174bdd34b89b38cd7fa4.exe
Resource
win10v2004-20220414-en
General
-
Target
4845e632325c892c3da2de6fca61624f914f0f340643174bdd34b89b38cd7fa4
-
Size
616KB
-
MD5
adab2a637738b6780e74b74dcabbb96f
-
SHA1
0614b295d8f8486ea42c89be35b3e44926a943c0
-
SHA256
4845e632325c892c3da2de6fca61624f914f0f340643174bdd34b89b38cd7fa4
-
SHA512
72d5f1034bc442533403b836b5c47bbe2c895f2d32eadc1cbc3982b446eb011d871cc38b17ea471e8fe09a4c30f951f411004779fbc5f7fe87a663474be49b9d
-
SSDEEP
12288:xBoPXcVry/MGLVJR8BzIUcnxW4MaZmvq7CCKoO:xBaMVry/pONIUcnxWna8vqm9oO
Malware Config
Signatures
Files
-
4845e632325c892c3da2de6fca61624f914f0f340643174bdd34b89b38cd7fa4.exe windows x86
27703a373e5c3834efcea572e6a8ce52
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StgConvertPropertyToVariant
CreateGenericComposite
PropVariantClear
OleBuildVersion
CoFreeUnusedLibrariesEx
msacm32
acmFormatTagEnumW
ws2_32
listen
gdi32
ResetDCW
GetCharWidthW
GetBitmapDimensionEx
GetArcDirection
crypt32
CryptInitOIDFunctionSet
CryptUnregisterDefaultOIDFunction
secur32
AcquireCredentialsHandleW
oleaut32
VariantCopy
user32
SetWindowsHookA
GetUserObjectInformationW
GetClipboardViewer
CallMsgFilterW
DefDlgProcW
IsZoomed
InSendMessage
GetWindowContextHelpId
DragDetect
DrawEdge
advapi32
NotifyChangeEventLog
avifil32
AVIFileOpenW
iphlpapi
EnableRouter
kernel32
GetCurrentProcess
UnhandledExceptionFilter
TerminateProcess
VirtualProtect
GetLocaleInfoW
LoadLibraryExA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
HeapReAlloc
VirtualAlloc
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetSystemInfo
VirtualQuery
CompareStringA
SetEnvironmentVariableA
GetTimeZoneInformation
WriteProcessMemory
GetModuleHandleA
CompareStringW
GetSystemTimeAsFileTime
LocalFlags
WaitForSingleObjectEx
GetLargestConsoleWindowSize
GetTickCount
IsValidCodePage
WaitForSingleObject
GetProcAddress
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetCurrentThreadId
GetCurrentThread
GetCommandLineA
GetVersionExA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapFree
Sleep
ExitProcess
OutputDebugStringA
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
InitializeCriticalSection
HeapAlloc
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
wininet
InternetGetConnectedStateExW
esent
JetSeek
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EXP Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ