Static task
static1
Behavioral task
behavioral1
Sample
4f292888693babedc7ebc4f904a2a898dd9d128c0213bf472a50c405fb3b4fc5.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
4f292888693babedc7ebc4f904a2a898dd9d128c0213bf472a50c405fb3b4fc5.exe
Resource
win10v2004-20220718-en
General
-
Target
4f292888693babedc7ebc4f904a2a898dd9d128c0213bf472a50c405fb3b4fc5
-
Size
344KB
-
MD5
3403d7a8943208af02fcfdc6f78cbfc5
-
SHA1
7a0ed12ec4df575dd2b5e6105d3febe5aa10bdfe
-
SHA256
4f292888693babedc7ebc4f904a2a898dd9d128c0213bf472a50c405fb3b4fc5
-
SHA512
d9d7ed904dfdfb80fff705a50f00a01728a469e40f4aad2ee7f74dd45882775db04b2976a70d747f5b43feba7412d54adde1644ed908de3f600c100852ad2196
-
SSDEEP
6144:OIRsq88CpXoIJENCPlkJYV3dQsDWWcOC5Bqolpcuo10UghxE2N5+NOW5ns1iiWVZ:Oh9R/ETDiw5BqolpcRG3ECh4h
Malware Config
Signatures
Files
-
4f292888693babedc7ebc4f904a2a898dd9d128c0213bf472a50c405fb3b4fc5.exe windows x86
ef8624cf605c58ab3923476208752f34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerInstallFileA
VerQueryValueW
VerInstallFileW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
mpr
WNetAddConnectionA
WNetDisconnectDialog1A
WNetCancelConnectionA
advapi32
GetServiceDisplayNameW
SetNamedSecurityInfoA
BuildTrusteeWithNameA
GetTrusteeTypeA
SetServiceStatus
RegQueryInfoKeyA
RegQueryValueA
QueryServiceLockStatusW
RegCloseKey
OpenSCManagerA
ChangeServiceConfig2A
OpenSCManagerW
RegisterServiceCtrlHandlerA
EnumServicesStatusA
RegEnumKeyW
RegSetValueA
RegCreateKeyExW
LsaQueryInformationPolicy
GetUserNameA
RegQueryValueW
ControlService
RegConnectRegistryA
RegCreateKeyExA
RegRestoreKeyW
RegisterServiceCtrlHandlerW
msvcrt
__p__dstbias
__dllonexit
_onexit
_itoa
strcoll
_y0
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strchr
user32
CopyImage
IsCharLowerA
AttachThreadInput
SetWindowPlacement
DestroyCursor
SetCaretPos
FindWindowExA
SetActiveWindow
DdeAccessData
IsMenu
GetQueueStatus
GetClassNameW
RegisterClipboardFormatA
AdjustWindowRect
DestroyAcceleratorTable
BeginDeferWindowPos
GetMenu
WindowFromPoint
IsCharAlphaNumericA
LoadIconA
GetClipboardFormatNameW
IsWindow
VkKeyScanExA
ChildWindowFromPointEx
GrayStringW
RemoveMenu
SetClipboardData
ModifyMenuA
LockWindowUpdate
VkKeyScanExW
GetClipboardData
VkKeyScanW
GetKeyboardLayoutList
InsertMenuA
GetWindow
CreateMenu
FrameRect
DrawIcon
ShowWindow
TranslateAcceleratorA
CharUpperBuffW
DeferWindowPos
InvalidateRect
PostMessageA
DialogBoxIndirectParamW
CharUpperA
RemovePropA
EnableWindow
GetDlgItemTextW
DrawTextA
MessageBoxA
GetClassInfoExW
LoadCursorFromFileA
DrawStateW
BlockInput
GetDlgCtrlID
GetLastActivePopup
RegisterWindowMessageA
InsertMenuW
TrackPopupMenu
ShowScrollBar
TranslateMessage
TrackPopupMenuEx
MapWindowPoints
CharLowerA
CharLowerW
TranslateAcceleratorW
SetRect
WaitMessage
GetScrollRange
ChangeClipboardChain
SetClassLongW
GetWindowTextLengthA
PostThreadMessageW
SetRectEmpty
SetCursor
GetClassLongA
GetDoubleClickTime
GetTabbedTextExtentA
LoadImageA
TranslateMDISysAccel
RegisterClassExW
IsCharAlphaW
CharPrevW
DrawTextW
GetClassInfoA
ScrollWindowEx
MapDialogRect
SetMenu
GetDC
GetSystemMetrics
GetMenuItemCount
ScreenToClient
DrawStateA
ClipCursor
ClientToScreen
SetMenuDefaultItem
WinHelpA
LoadBitmapA
UnionRect
GetDlgItemTextA
EnumThreadWindows
CreateDialogParamA
FindWindowA
SetPropA
ScrollWindow
WindowFromDC
GetProcessWindowStation
MapVirtualKeyExA
DispatchMessageW
GetWindowTextA
SetWindowTextA
GetClipCursor
LoadKeyboardLayoutW
GetWindowLongA
CloseWindow
DialogBoxIndirectParamA
MoveWindow
MapVirtualKeyW
DrawFrameControl
DdeQueryStringA
CharToOemA
GetDlgItemInt
FillRect
KillTimer
CreateDialogIndirectParamW
LoadMenuW
FindWindowW
CharLowerBuffA
DefWindowProcA
CreateDialogIndirectParamA
SystemParametersInfoW
GetUserObjectInformationW
GetMessageExtraInfo
GetScrollInfo
IsChild
DispatchMessageA
GetGUIThreadInfo
LoadAcceleratorsA
GetClipboardViewer
SetCaretBlinkTime
SetWindowLongA
DdeFreeStringHandle
SetWindowLongW
GetMessageA
ShowCaret
InSendMessage
CreateIconFromResource
SendMessageA
GetCapture
GetFocus
MapVirtualKeyExW
IsWindowEnabled
SetFocus
DialogBoxParamA
RegisterHotKey
ShowOwnedPopups
GetWindowModuleFileNameA
SetWindowPos
EnableScrollBar
GetParent
SendDlgItemMessageA
IntersectRect
GetSysColor
ReuseDDElParam
CharNextW
ChangeDisplaySettingsA
SendDlgItemMessageW
PtInRect
CopyIcon
CreateWindowExW
DrawIconEx
PostMessageW
DdeClientTransaction
GetForegroundWindow
GetSysColorBrush
CharUpperW
SystemParametersInfoA
GetWindowThreadProcessId
CloseDesktop
ShowCursor
OffsetRect
GetClassInfoW
SetForegroundWindow
SetClassLongA
GetDlgItem
UnpackDDElParam
GetNextDlgTabItem
IsWindowVisible
LoadCursorA
MapVirtualKeyA
FindWindowExW
IsDlgButtonChecked
GetKeyState
CreateWindowStationW
IsZoomed
CheckMenuItem
CloseClipboard
WinHelpW
AppendMenuW
LoadStringW
DefDlgProcA
SetDlgItemInt
ReleaseDC
GetMenuState
RegisterClipboardFormatW
GetWindowLongW
CharPrevA
IsClipboardFormatAvailable
MessageBeep
SetDlgItemTextW
SendNotifyMessageW
GetKeyboardLayoutNameW
GetKeyNameTextW
GetMessagePos
DrawTextExA
CharNextA
BringWindowToTop
GetClassNameA
PeekMessageW
mouse_event
UnhookWinEvent
EnumDisplaySettingsW
DdeConnect
SendInput
GetKeyboardState
LoadMenuA
DestroyCaret
gdi32
GetObjectA
SetPixel
GetROP2
OffsetViewportOrgEx
GetTextCharsetInfo
SelectClipRgn
SetPolyFillMode
OffsetRgn
CreateDIBSection
GetGlyphOutlineW
PolyBezierTo
CreateRectRgn
RealizePalette
RemoveFontResourceA
GetStockObject
SetROP2
SelectPalette
DPtoLP
SetViewportExtEx
CreateFontIndirectW
EnumMetaFile
StartDocW
CreatePenIndirect
GetRgnBox
GetTextMetricsA
GetCharWidthA
GetTextExtentPointA
IntersectClipRect
StretchBlt
ExtCreatePen
CreatePen
Pie
GetTextColor
GetEnhMetaFilePaletteEntries
oleaut32
VarCat
LPSAFEARRAY_UserFree
mfc42
ord6375
ord4486
ord1072
ord1026
ord5731
ord815
ord3922
ord1089
ord1054
ord2396
ord1082
ord1059
ord2725
ord1063
ord1083
ord5307
ord1023
ord5714
ord1086
ord2982
ord1082
ord3259
ord4465
ord1056
ord3262
ord2985
ord3081
ord2976
ord1086
ord3830
ord3831
ord4080
ord1023
ord4424
ord3738
ord561
ord3825
ord1576
ord5302
ord1168
ord3079
Sections
.text Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 846KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ