Static task
static1
Behavioral task
behavioral1
Sample
4f55af179a86bc2f91549e275d0c6168ae6a741895ca1c6256e6e747b3da5eed.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
4f55af179a86bc2f91549e275d0c6168ae6a741895ca1c6256e6e747b3da5eed.exe
Resource
win10v2004-20220718-en
General
-
Target
4f55af179a86bc2f91549e275d0c6168ae6a741895ca1c6256e6e747b3da5eed
-
Size
405KB
-
MD5
121f8ff33ade92b1bfe147f8ed50e2a2
-
SHA1
176ba5972f93a0da53d7ecb8c1d7412574c5b462
-
SHA256
4f55af179a86bc2f91549e275d0c6168ae6a741895ca1c6256e6e747b3da5eed
-
SHA512
664021c72e12ff5b30799f01c0834017b5f84b10ba3224fd2e6120bb236a34382e8a9325dbfc978342b73ebae15a9075018cb52cfda0d2964967713975aaa17c
-
SSDEEP
6144:2PMRLAOhgrDaSYl8cbE9sNteEsbgRlAD1xyp5CKnZzEicBMj:2URLfUC8ISsNsEsbS6Kp57KBI
Malware Config
Signatures
Files
-
4f55af179a86bc2f91549e275d0c6168ae6a741895ca1c6256e6e747b3da5eed.exe windows x86
ed73ea561625630bc4eec41d59e9ebb6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreatePopupMenu
EnableWindow
FindWindowA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
DialogBoxParamA
GetDlgItemTextA
GetKeyState
GetSysColor
FillRect
EndPaint
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
GetWindowRect
LoadBitmapA
LoadIconA
DefWindowProcA
GetDlgItem
PostMessageA
PostQuitMessage
RegisterClassExA
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenuItemBitmaps
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TrackPopupMenu
UpdateWindow
CreateWindowExA
CreateDialogParamA
CloseWindow
ChangeDisplaySettingsA
BeginPaint
AppendMenuA
wsprintfA
SetRect
UnregisterClassA
GetWindowThreadProcessId
SetCursor
GetMessageA
TranslateMessage
ValidateRect
WindowFromPoint
MoveWindow
IsDialogMessageA
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
CallWindowProcA
SystemParametersInfoA
GetWindow
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetSysColorBrush
GetClassNameA
DestroyMenu
UnhookWindowsHookEx
ExitWindowsEx
IsIconic
DrawIcon
GetParent
OffsetRect
CopyRect
LoadImageA
InvalidateRect
GetWindowDC
SetWindowRgn
GetTopWindow
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
shell32
SHChangeNotify
ShellExecuteA
advapi32
RegCreateKeyA
RegSetValueExA
StartServiceA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegFlushKey
OpenProcessToken
RegCloseKey
OpenServiceA
OpenSCManagerA
LookupPrivilegeValueA
GetTokenInformation
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
AdjustTokenPrivileges
wininet
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
InternetReadFile
gdi32
CreateRectRgn
CreateFontIndirectA
GetStockObject
GetDeviceCaps
SaveDC
RestoreDC
SetMapMode
GetClipBox
GetDIBits
CombineRgn
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
TextOutA
SwapBuffers
SetTextColor
ScaleViewportExtEx
StretchBlt
GetBkColor
GetObjectA
SetPixelFormat
SetBkMode
SetBkColor
SelectObject
Polygon
MoveToEx
LineTo
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
ChoosePixelFormat
BitBlt
SetViewportExtEx
CreateBitmap
SetWindowExtEx
ScaleWindowExtEx
comctl32
ord17
ImageList_LoadImageA
netapi32
NetUserAdd
kernel32
GetCurrentProcess
GetCurrentDirectoryA
GetCommandLineA
FreeUserPhysicalPages
FreeLibrary
FindResourceA
ExitThread
ExitProcess
DeviceIoControl
DeleteFileA
CreateThread
CreateProcessA
CreateFileMappingA
CreateFileA
ReadFile
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenFileMappingA
GetCurrentThread
MapUserPhysicalPages
LockResource
LoadResource
LoadLibraryA
GlobalUnlock
AllocateUserPhysicalPages
GlobalMemoryStatusEx
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersion
GetUserDefaultLangID
CreateDirectoryA
CloseHandle
GetCurrentThreadId
GetFileSize
GetLastError
GetLocalTime
GetModuleHandleA
GetPriorityClass
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
InitializeCriticalSectionAndSpinCount
SetStdHandle
RaiseException
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
MapViewOfFile
WriteConsoleW
Sections
.bin Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ