Static task
static1
Behavioral task
behavioral1
Sample
4ea5a4593e5b34256e70d713898843f7a3b29c1659a0237cb1baca9ce7f41735.exe
Resource
win7-20220715-en
General
-
Target
4ea5a4593e5b34256e70d713898843f7a3b29c1659a0237cb1baca9ce7f41735
-
Size
458KB
-
MD5
11d228fc8b33ab8123d67743f2ae8118
-
SHA1
5bb6089c557f3b7e5f000bfa895322f327734907
-
SHA256
4ea5a4593e5b34256e70d713898843f7a3b29c1659a0237cb1baca9ce7f41735
-
SHA512
420e9a243c615d8d6a6c14b663fd5c5f9290ef0faa4684d3c9eb2c3985f8b71080bdf39f61057b96d816c9204c219de1bd7bd7dc1d142700a5197c9c82976efc
-
SSDEEP
6144:3x1snlyGA3xF2IwkfYnGI+DNJ5wVgFsqG5OjrgihknSBH8h4aFtYStvzyYry:DDxQIXZDNJ5wVgQ5Qrgih7itf/y
Malware Config
Signatures
Files
-
4ea5a4593e5b34256e70d713898843f7a3b29c1659a0237cb1baca9ce7f41735.exe windows x86
09b2e15756dfd82d8b4c48a2319a0f51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetStartupInfoA
HeapFree
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
RaiseException
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
HeapAlloc
RtlUnwind
SetErrorMode
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetFileSizeEx
LocalFileTimeToFileTime
FileTimeToLocalFileTime
CreateFileA
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
GetStringTypeExA
DeleteFileA
MoveFileA
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GetModuleHandleW
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
CloseHandle
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetModuleFileNameA
GlobalLock
GlobalUnlock
MulDiv
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
lstrcmpW
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
lstrlenA
lstrcpyA
lstrcatA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetLastError
GetFileType
SetLastError
user32
UnregisterClassA
GetDCEx
SetCapture
CharUpperA
GetCursorPos
WindowFromPoint
KillTimer
SetTimer
SetRect
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetActiveWindow
SetCursor
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
GetDesktopWindow
TranslateAcceleratorA
GetMenuStringA
AppendMenuA
InsertMenuA
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
GetMenuItemInfoA
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetSysColor
EnableWindow
InvalidateRect
LockWindowUpdate
TrackPopupMenu
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
GetClientRect
PostMessageA
GetSubMenu
GetMenuItemID
InflateRect
LoadCursorA
GetSysColorBrush
CreateDialogIndirectParamA
GetNextDlgTabItem
GetMenuItemCount
MessageBoxA
CreateWindowExA
EndDialog
ShowOwnedPopups
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
CopyRect
FillRect
DrawFocusRect
GetFocus
SendMessageA
UpdateWindow
GetParent
DestroyIcon
ShowWindow
AdjustWindowRectEx
IsIconic
IsChild
GetDlgCtrlID
GetWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
GetClassInfoExA
GetClassInfoA
RegisterClassA
ScreenToClient
EqualRect
DeferWindowPos
PtInRect
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
SetMenuItemBitmaps
gdi32
CreatePatternBrush
CreateCompatibleDC
GetStockObject
GetDeviceCaps
CreateSolidBrush
DeleteDC
CreateCompatibleBitmap
GetTextMetricsA
GetCharWidthA
CreateFontA
StretchDIBits
GetBkColor
CreateFontIndirectA
SetRectRgn
CombineRgn
RectVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
GetTextExtentPoint32A
PtVisible
GetPixel
BitBlt
CreateRectRgn
SelectClipRgn
DeleteObject
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
TextOutA
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegOpenKeyA
RegSetValueA
RegDeleteValueA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
GetFileSecurityA
SetFileSecurityA
shell32
DragFinish
SHGetFileInfoA
ExtractIconA
DragQueryFileA
comctl32
ImageList_DrawEx
ImageList_GetIconSize
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx
oleaut32
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ