Static task
static1
Behavioral task
behavioral1
Sample
47e99559ebc0691c7fcc3c18a6b2449c1fed9b5aa02fde03992d9487dda9209a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47e99559ebc0691c7fcc3c18a6b2449c1fed9b5aa02fde03992d9487dda9209a.exe
Resource
win10v2004-20220812-en
General
-
Target
47e99559ebc0691c7fcc3c18a6b2449c1fed9b5aa02fde03992d9487dda9209a
-
Size
86KB
-
MD5
2921f936635f38452392c5db7e8723ba
-
SHA1
8e2662d64f6e68748ff77aac7df151464855300f
-
SHA256
47e99559ebc0691c7fcc3c18a6b2449c1fed9b5aa02fde03992d9487dda9209a
-
SHA512
79727d88d48e5408acb6e6ff3eb29f936c44e6dd498fe00f28831049e2a4033590e16c82d84c6e0fa2d960d4b7da45e9b709eb0ee57a92bb5314abd147ac95dd
-
SSDEEP
1536:HSQjqkrmTnnob1KfL38rhNEtjkdBht85zEurtq9:HSQSnoUQVNExIB/abpi
Malware Config
Signatures
Files
-
47e99559ebc0691c7fcc3c18a6b2449c1fed9b5aa02fde03992d9487dda9209a.exe windows x86
59f8b1900d016cce28cfe3d6a3976253
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExW
RegCreateKeyExA
RegLoadKeyW
RegQueryValueA
RegLoadKeyA
RegDeleteValueA
RegGetKeySecurity
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegQueryValueExA
RegReplaceKeyW
RegDeleteValueW
RegEnumKeyW
RegQueryInfoKeyW
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueW
gdi32
GetClipBox
BitBlt
BeginPath
ExtTextOutA
DeleteDC
RestoreDC
GetBitmapBits
GetBrushOrgEx
AddFontResourceW
ExcludeClipRect
AddFontResourceTracking
GetPixel
AddFontResourceExW
SetTextColor
GetDCOrgEx
AddFontMemResourceEx
DeleteObject
AbortPath
CloseMetaFile
user32
CreateIcon
AppendMenuA
IsMenu
AppendMenuW
DrawIconEx
DrawTextW
GetFocus
DrawTextA
GetDlgItem
CopyRect
LoadCursorA
DrawIcon
GetDC
GetMenu
GetWindowTextLengthA
BlockInput
DialogBoxParamW
IsWindow
EndDialog
CloseWindow
InsertMenuA
kernel32
GetCPInfo
ReadConsoleA
GetCommandLineA
DeleteFileW
GlobalFree
CopyFileExW
CreateProcessA
ReadFile
DeleteAtom
Sleep
FindFirstFileA
CreateDirectoryA
GetComputerNameA
SetLastError
ExitThread
OpenFileMappingA
DeleteFileA
comctl32
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_DragLeave
ImageList_GetIcon
ImageList_DragEnter
ImageList_Merge
ImageList_DrawIndirect
ImageList_Remove
ImageList_Read
ImageList_DragMove
ImageList_Draw
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_Create
InitCommonControls
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Copy
ImageList_DrawEx
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ