Static task
static1
Behavioral task
behavioral1
Sample
40bf9c66136050e1fbad81a2ad6fd5ad574cedddde03f3ca6166c0c53e2d43dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
40bf9c66136050e1fbad81a2ad6fd5ad574cedddde03f3ca6166c0c53e2d43dd.exe
Resource
win10v2004-20220812-en
General
-
Target
40bf9c66136050e1fbad81a2ad6fd5ad574cedddde03f3ca6166c0c53e2d43dd
-
Size
480KB
-
MD5
e01c716291a65c6fd59453530d822dce
-
SHA1
48e361626fd4248ddbbad67e74ddd638a81a4aba
-
SHA256
40bf9c66136050e1fbad81a2ad6fd5ad574cedddde03f3ca6166c0c53e2d43dd
-
SHA512
520ed9e4a7208be76c533160b60ba8331cbc69f490579ea88762e102a0d79a9e6b9ada382815866692b55ecafe19ced5a3e1961eec708f9f898d1d465b71263e
-
SSDEEP
12288:fOtNey/5L0Xn0x85WgcYlTidWR0wSkRWsGdPrM8P:eoy/SXnjsHYlTi8RasGFA8
Malware Config
Signatures
Files
-
40bf9c66136050e1fbad81a2ad6fd5ad574cedddde03f3ca6166c0c53e2d43dd.exe windows x86
a965f288e60e49dc61b440450bce9023
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
FlushFileBuffers
EnumSystemCodePagesA
GetProcAddress
GetOEMCP
GetSystemTimeAsFileTime
InterlockedIncrement
CreateMutexA
CompareStringA
TlsGetValue
GetCurrentThread
UnhandledExceptionFilter
SetHandleCount
GetVersionExW
CreateToolhelp32Snapshot
GetModuleFileNameW
LCMapStringW
RtlMoveMemory
SetComputerNameW
VirtualFree
OpenMutexW
GetStdHandle
EnumSystemLocalesA
GetModuleFileNameA
GetStartupInfoA
GetCurrentProcess
SetConsoleCtrlHandler
GetCPInfo
GetTickCount
DeleteCriticalSection
GetFileType
GetConsoleCP
GetTimeFormatA
WriteConsoleA
WriteConsoleW
HeapAlloc
SetEnvironmentVariableA
RtlUnwind
IsDebuggerPresent
CloseHandle
SetStdHandle
GetModuleHandleA
EnumResourceLanguagesW
FreeLibrary
GetLocaleInfoA
MultiByteToWideChar
GetTimeZoneInformation
GetCurrentProcessId
HeapSize
SetFilePointer
HeapCreate
GetCommandLineA
SetLastError
InterlockedExchange
GetLocaleInfoW
TlsAlloc
SetUnhandledExceptionFilter
WideCharToMultiByte
HeapDestroy
InitializeCriticalSectionAndSpinCount
Sleep
GetUserDefaultLCID
IsValidLocale
GetWindowsDirectoryA
VirtualQuery
ReadFile
GetStartupInfoW
GetConsoleOutputCP
InterlockedDecrement
GetCurrentDirectoryW
GetEnvironmentStringsW
QueryPerformanceCounter
VirtualAlloc
GetStringTypeA
CopyFileExA
GetStringTypeW
CreateFileA
ReadConsoleInputA
CompareStringW
OpenMutexA
GetCurrentThreadId
GetVolumeInformationA
TlsSetValue
ExitProcess
TlsFree
GetACP
GetDateFormatA
SetCriticalSectionSpinCount
HeapFree
GetLastError
GetSystemDirectoryW
LCMapStringA
SleepEx
GetModuleHandleW
GetConsoleMode
IsValidCodePage
HeapReAlloc
EnterCriticalSection
FreeEnvironmentStringsW
TerminateProcess
LoadLibraryA
WriteFile
MapViewOfFile
LeaveCriticalSection
gdi32
GetCharWidthFloatW
GetCharABCWidthsFloatA
GetBkColor
SelectPalette
ColorMatchToTarget
UpdateICMRegKeyA
GetRandomRgn
DescribePixelFormat
CreatePenIndirect
EndPath
GetGlyphOutline
DeleteDC
GdiPlayScript
SetArcDirection
CreateDCA
SwapBuffers
GetDeviceCaps
CreateRectRgn
CreateCompatibleDC
SetMiterLimit
SetTextJustification
SetBkColor
PolyBezier
GetLogColorSpaceA
CreatePalette
SetMetaRgn
user32
EndPaint
MessageBoxA
BroadcastSystemMessageW
CreateWindowExW
SendNotifyMessageA
SetMessageExtraInfo
GetShellWindow
GetClassLongW
CreateWindowStationA
GetMenuState
MessageBoxExA
SetUserObjectInformationA
SetUserObjectSecurity
GetInputDesktop
ShowWindow
CallWindowProcW
DdeAddData
RegisterClassA
ValidateRect
GetClassInfoExW
SetWindowRgn
RegisterClassExA
comctl32
InitCommonControlsEx
Sections
.text Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ