Static task
static1
Behavioral task
behavioral1
Sample
4a4fef5caee31af47dc83c7ed50e95fc9df4af0b31eb57bea228d9a4ba953d86.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a4fef5caee31af47dc83c7ed50e95fc9df4af0b31eb57bea228d9a4ba953d86.exe
Resource
win10v2004-20220812-en
General
-
Target
4a4fef5caee31af47dc83c7ed50e95fc9df4af0b31eb57bea228d9a4ba953d86
-
Size
299KB
-
MD5
0320c7f57b13928ba5e0e8ced38da35b
-
SHA1
faf0d6c5ac2e62b99f06535717819f788018c512
-
SHA256
4a4fef5caee31af47dc83c7ed50e95fc9df4af0b31eb57bea228d9a4ba953d86
-
SHA512
85d3ce5d914d1cff31de923e9319702fd3ddacf5cb343a3a0a09cd07cdce21336cd9fa7069bea5622bf4287acfc706ca86de9d26a596ef678e6f8cbaa90ad949
-
SSDEEP
6144:BMbkuxN1o1ZIqAcY/UdysmXDXgwfoYlg3H8cVdzAIckPrXZQ:SHfo/wlCDpwwYWcu5DJPrX
Malware Config
Signatures
Files
-
4a4fef5caee31af47dc83c7ed50e95fc9df4af0b31eb57bea228d9a4ba953d86.exe windows x86
936dccbad7593cfed01c7e27a0031482
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
SetLastError
LocalFree
lstrlenA
CloseHandle
LocalUnlock
CreateThread
CreateFileA
Sleep
GetSystemTime
SetEvent
GetTickCount
GetComputerNameA
UnmapViewOfFile
GetModuleHandleA
HeapCreate
GetCurrentDirectoryA
PulseEvent
CreateThread
LoadLibraryA
user32
GetDC
CheckRadioButton
SetFocus
DispatchMessageA
CreateWindowExA
FillRect
DrawMenuBar
GetDlgItem
GetScrollBarInfo
CallWindowProcA
IsWindow
GetKeyState
DrawEdge
clbcatq
UpdateFromAppChange
SetupOpen
SetSetupSave
DowngradeAPL
CheckMemoryGates
desk.cpl
InstallScreenSaver
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ