Static task
static1
Behavioral task
behavioral1
Sample
d4c479ec6fa1d78e0ae5758962bc03e1dc3f20dfb8102c36e9d3459173cb9f23.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4c479ec6fa1d78e0ae5758962bc03e1dc3f20dfb8102c36e9d3459173cb9f23.exe
Resource
win10v2004-20220812-en
General
-
Target
d4c479ec6fa1d78e0ae5758962bc03e1dc3f20dfb8102c36e9d3459173cb9f23
-
Size
440KB
-
MD5
c0e89bb63533adc8a90eb5545d6cefaa
-
SHA1
6169c68dc123e24b5065a22f3f3582d0f7049d36
-
SHA256
d4c479ec6fa1d78e0ae5758962bc03e1dc3f20dfb8102c36e9d3459173cb9f23
-
SHA512
32ffddd4b25e00750fcfda007a3ee908ad15cd6d999e95399b71f439f9cb838f6a725978416b08f7ae2b105e7ee3810b6672a5e7dcc737eab88ea4b2c7bebd68
-
SSDEEP
6144:9vLpPV4I/w589NjIRmqZHF7S12E4IBprBnBsfdAZ:9vLpPnNu7SsE4002
Malware Config
Signatures
Files
-
d4c479ec6fa1d78e0ae5758962bc03e1dc3f20dfb8102c36e9d3459173cb9f23.exe windows x86
7d8fa7c1e43d927cf18ca8ae169eb559
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetVersionExA
WaitForSingleObject
CreateProcessA
ResetEvent
SetEvent
WaitForMultipleObjects
Sleep
CreateThread
GetLastError
CreateMutexA
LoadLibraryExA
GetModuleHandleA
GetSystemDirectoryA
TerminateProcess
GlobalFree
GlobalAlloc
ReleaseMutex
GetCurrentProcessId
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
CompareStringW
CompareStringA
FindFirstFileA
GetLocaleInfoW
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
VirtualAlloc
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
OpenProcess
FindClose
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
GetModuleFileNameA
WriteConsoleW
SetStdHandle
ReadFile
SetFilePointer
CreateFileA
SetEnvironmentVariableA
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
MultiByteToWideChar
GetFileAttributesA
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FatalAppExitA
WriteFile
SetConsoleCtrlHandler
InterlockedExchange
SetEnvironmentVariableW
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
PostQuitMessage
LoadMenuA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenu
CreatePopupMenu
GetMenuStringA
ModifyMenuA
EnableMenuItem
FindWindowA
GetWindowThreadProcessId
SendMessageA
AppendMenuA
MessageBoxA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
wsprintfA
gdi32
GetStockObject
advapi32
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyA
shell32
Shell_NotifyIconA
ShellExecuteA
Sections
.text Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kghtcde Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE