Static task
static1
Behavioral task
behavioral1
Sample
4c217998b0d2f52a37a5bdf1ba34559eeff571b068ca856aacd3f259bf752675.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c217998b0d2f52a37a5bdf1ba34559eeff571b068ca856aacd3f259bf752675.exe
Resource
win10v2004-20220812-en
General
-
Target
4c217998b0d2f52a37a5bdf1ba34559eeff571b068ca856aacd3f259bf752675
-
Size
41KB
-
MD5
7fed26ec8faa3ce444a54e42b21967fc
-
SHA1
986a10c6d58ce268215a28c2cd0238b1f2059455
-
SHA256
4c217998b0d2f52a37a5bdf1ba34559eeff571b068ca856aacd3f259bf752675
-
SHA512
add7a7a9bc923a54e87010500f92edf544b648ceb68a7c6cf86ee2df5bd1ccd21f7b6bbd52ad2fc2756aa9871ddb648a991c7f5db3594b969160f94889ddafe6
-
SSDEEP
768:5T5kva0ae5FWc0UHvzug7qYVnj7xRSl2bZ3Yz:puaW5QUHvzugOG9Z3Y
Malware Config
Signatures
Files
-
4c217998b0d2f52a37a5bdf1ba34559eeff571b068ca856aacd3f259bf752675.exe windows x86
61466d37dd5673fbba38c286b756411d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
EnumWindows
GetWindowLongA
TranslateAcceleratorA
DeleteMenu
GetWindowThreadProcessId
GetDC
ReleaseDC
CheckMenuItem
GetSubMenu
SetWindowLongA
CheckRadioButton
CreateIconIndirect
SetForegroundWindow
GetScrollInfo
wsprintfA
LoadAcceleratorsA
RegisterClassA
GetDlgItem
LoadImageA
GetWindowPlacement
SetFocus
LoadIconA
EnableMenuItem
GetCursorPos
TrackPopupMenu
CreateDialogParamA
ExitWindowsEx
GetKeyState
GetClassLongA
OffsetRect
GetDoubleClickTime
LoadMenuA
FrameRect
DispatchMessageA
RemoveMenu
SendMessageTimeoutA
DestroyIcon
GetMenuItemCount
AppendMenuA
DialogBoxIndirectParamA
PostMessageA
DrawIconEx
SetUserObjectSecurity
GetDesktopWindow
GetWindowTextA
SetPropA
EmptyClipboard
TrackPopupMenuEx
RegisterClassExA
ClientToScreen
GetWindow
IsDlgButtonChecked
CheckMenuRadioItem
CallWindowProcA
CloseClipboard
LoadStringA
DefMDIChildProcA
EndDialog
SetScrollInfo
GetSysColorBrush
GetSysColor
ChildWindowFromPoint
MoveWindow
DrawTextA
OpenClipboard
GetWindowRect
SetTimer
CreateMenu
IsIconic
GetMenu
LoadCursorA
PtInRect
DrawMenuBar
kernel32
PulseEvent
LCMapStringW
GetSystemInfo
GlobalUnlock
WaitForMultipleObjects
lstrlenW
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateEventA
GetConsoleOutputCP
GetCPInfo
TlsSetValue
GetCommandLineA
GetCurrentThreadId
ExitThread
GetCurrentProcess
WriteConsoleA
SetProcessWorkingSetSize
SetLastError
VirtualQueryEx
FileTimeToSystemTime
ResetEvent
GetProcAddress
GetDateFormatA
GlobalReAlloc
GetStartupInfoA
GetTickCount
SetUnhandledExceptionFilter
SearchPathA
LoadLibraryA
CreateProcessA
Module32First
WriteConsoleW
GetNumberFormatA
ResumeThread
FindClose
GetModuleFileNameA
SetStdHandle
CreateFileA
GlobalLock
GetProcessWorkingSetSize
DuplicateHandle
IsDebuggerPresent
QueryPerformanceFrequency
GetCurrentThread
GetVersion
lstrlenA
VirtualAlloc
GetStdHandle
IsValidCodePage
CreateThread
GetEnvironmentStringsW
SetEndOfFile
SetFilePointer
IsBadReadPtr
FlushFileBuffers
InterlockedIncrement
ExitProcess
SetEnvironmentVariableA
GetStringTypeA
lstrcpynA
GetFileTime
GetProcessAffinityMask
GetFileAttributesA
HeapSize
OpenEventA
QueryPerformanceCounter
GetModuleHandleA
FormatMessageA
GetDriveTypeA
VirtualFree
gdi32
SetBkMode
SetBkColor
LineTo
EndPage
CreateFontIndirectA
GetBkColor
GetBkMode
CreateSolidBrush
StartDocA
SelectObject
RestoreDC
MoveToEx
GetStockObject
SetROP2
CreateCompatibleDC
CreatePen
SaveDC
GetTextExtentPoint32A
RectInRegion
CreateDIBSection
SetMapMode
SetTextColor
StartPage
Polyline
SelectClipRgn
CreateCompatibleBitmap
SetTextAlign
CreateRectRgn
DeleteDC
GetObjectA
GetTextMetricsA
CreateRectRgnIndirect
Rectangle
msvcrt
_wcsrev
_getws
_setsystime
_mbsinc
_XcptFilter
_ftol
__p__commode
_winmajor
_inp
_adjust_fdiv
_gmtime64
_vscwprintf
__getmainargs
difftime
_mbcjistojms
_acmdln
_gcvt
_cputs
__setusermatherr
_pctype
_except_handler3
strncat
_ismbclegal
_ungetwch
realloc
_findnext64
wprintf
_strset
exit
_cscanf
_ismbbkana
_snprintf
__set_app_type
memcpy
_vsnwprintf
_ismbstrail
_aligned_realloc
wcscspn
_itoa
strstr
wscanf
_putw
_ungetch
wcscpy
_mbsnbicmp
_splitpath
_outpw
_adj_fptan
feof
_creat
_exit
_lfind
_fputchar
_wctime64
_stat64
_mkdir
_lseeki64
isgraph
_initterm
_pwctype
_rotl
_atodbl
rand
_pipe
_wcserror
_mbschr
_wsopen
isdigit
_vscprintf
abs
vfprintf
_mbsnbcat
setlocale
_safe_fdiv
_controlfp
perror
memmove
_mktemp
_scprintf
__p__fmode
_mbsdup
_beep
_spawnvpe
_mbsnbicoll
_findfirst64
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ