Static task
static1
Behavioral task
behavioral1
Sample
4da541578caf4cc3336ffb6fef30997deb1f7f6ab9bb38a2be58e014cc7b58a3.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
4da541578caf4cc3336ffb6fef30997deb1f7f6ab9bb38a2be58e014cc7b58a3.exe
Resource
win10v2004-20220718-en
General
-
Target
4da541578caf4cc3336ffb6fef30997deb1f7f6ab9bb38a2be58e014cc7b58a3
-
Size
367KB
-
MD5
4730bcca5ec3e6a057604dc02d289236
-
SHA1
fe421fa51dc1ca9133189f6afe7bd410238971b7
-
SHA256
4da541578caf4cc3336ffb6fef30997deb1f7f6ab9bb38a2be58e014cc7b58a3
-
SHA512
f84d3c59fa448db14ef6f247adc9f1785a5f9149701e6faa9aeb64298a30245694faf4aa428e0396b4dd418a164c7564a9de7ab20c1ae669497422ee187b1584
-
SSDEEP
6144:LowVMDFMwh7W5O2ojvREMME/BOaDmMsrT6XMjbUemfJtAPPUUWkoZHO50pljH:LydeOJREREZdDlq+8jgeYJO9WkoZHO52
Malware Config
Signatures
Files
-
4da541578caf4cc3336ffb6fef30997deb1f7f6ab9bb38a2be58e014cc7b58a3.exe windows x86
14634de64177ca2e61ffc9a4b84851fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetAddConnectionA
WNetConnectionDialog
WNetDisconnectDialog
WNetDisconnectDialog1A
WNetConnectionDialog1A
advapi32
GetServiceDisplayNameW
CreateProcessAsUserA
BuildTrusteeWithNameA
GetFileSecurityA
GetServiceDisplayNameA
GetTrusteeTypeA
RegisterServiceCtrlHandlerW
RegOpenKeyExA
RegUnLoadKeyW
LsaQueryInformationPolicy
RegNotifyChangeKeyValue
RegEnumKeyExA
SetServiceObjectSecurity
LockServiceDatabase
OpenSCManagerW
CloseServiceHandle
StartServiceCtrlDispatcherW
RegOverridePredefKey
RegSetValueExW
DecryptFileW
CreateProcessAsUserW
RegCreateKeyW
CreateServiceA
SetServiceStatus
BuildImpersonateTrusteeA
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_acmdln
div
_atoi64
_tell
_onexit
__dllonexit
_ui64tow
_controlfp
isprint
_initterm
gdi32
MoveToEx
BeginPath
PtVisible
GetEnhMetaFilePaletteEntries
EndDoc
GetStockObject
SetPolyFillMode
CreatePen
SetBkMode
CreateCompatibleBitmap
GetClipBox
GetTextColor
GetEnhMetaFileBits
Ellipse
GetNearestPaletteIndex
GetMapMode
SwapBuffers
SetMapMode
CreateSolidBrush
EndPage
OffsetClipRgn
GetBkColor
StartDocW
GetTextExtentPoint32A
ResizePalette
GetRgnBox
GetObjectType
GetObjectA
DeleteObject
PolyBezierTo
SetDIBColorTable
CreateDIBPatternBrushPt
CreatePenIndirect
GetSystemPaletteEntries
AbortDoc
TextOutA
GetWinMetaFileBits
GetDIBits
SetTextAlign
RemoveFontResourceA
StartPage
Polyline
CreateFontA
SetWindowExtEx
EnumFontFamiliesExW
GetTextExtentPoint32W
DeleteDC
FillPath
SetWinMetaFileBits
CopyEnhMetaFileW
SaveDC
PolyPolyline
StretchBlt
UnrealizeObject
EndPath
GetKerningPairsA
CreateFontIndirectW
OffsetRgn
GetGlyphOutlineW
CreateRectRgn
GetObjectW
Rectangle
GetEnhMetaFileHeader
SetBitmapBits
SetTextCharacterExtra
GetCharWidthA
SetROP2
SelectPalette
SetColorAdjustment
SetRectRgn
ExtCreatePen
FillRgn
GetFontData
CancelDC
ExtSelectClipRgn
DeleteEnhMetaFile
oleaut32
LPSAFEARRAY_UserSize
user32
CreateIconFromResourceEx
mfc42
ord3259
ord4465
ord1016
ord3262
ord2985
ord3081
ord2976
ord1090
ord3830
ord3831
ord1072
ord3079
ord4080
ord1090
ord4424
ord3738
ord561
ord1576
ord5714
ord1012
ord2982
ord1090
ord3825
ord1168
ord5307
ord1031
ord815
ord6375
ord4486
ord1078
ord1092
ord5731
ord3922
ord1089
ord1063
ord2396
ord1071
ord1100
ord5302
ord2725
ord1015
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ