Static task
static1
Behavioral task
behavioral1
Sample
f4067cc6287a321ade77c5f55097de4578f1ba829098def1c6515de6d60780c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4067cc6287a321ade77c5f55097de4578f1ba829098def1c6515de6d60780c1.exe
Resource
win10v2004-20220901-en
General
-
Target
f4067cc6287a321ade77c5f55097de4578f1ba829098def1c6515de6d60780c1
-
Size
249KB
-
MD5
64f2f1fb68e71335e46cc3f5468f977f
-
SHA1
3d6c12a4ab79328e800e7b6c9e2ef9dafde35313
-
SHA256
f4067cc6287a321ade77c5f55097de4578f1ba829098def1c6515de6d60780c1
-
SHA512
76dc353251109febe24f483764f6d83e4c1dfad681752993b9deafb881bfb4587c450ec6bfc8d595da1480a17cf558c397adf756dafaf0d3c9350af7e51b99b6
-
SSDEEP
6144:D/CaA1/1QI0xotv5pNNC17tnKmJrAMFhJgVj5V9kW4h1:D/Calqv5pmptKmJrAogVj1q
Malware Config
Signatures
Files
-
f4067cc6287a321ade77c5f55097de4578f1ba829098def1c6515de6d60780c1.exe windows x86
02c0e3238cc53fef28eacfae519ca725
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
wvsprintfA
urlmon
IsAsyncMoniker
UrlMkSetSessionOption
URLOpenPullStreamW
gdi32
AddFontResourceW
CreateDCW
AngleArc
AddFontResourceA
CreateBrushIndirect
ws2_32
gethostname
select
accept
getservbyport
send
sendto
recv
gethostbyname
opengl32
glLightModeliv
glGetTexImage
glScissor
glEvalCoord1fv
glRectdv
glGetClipPlane
glRasterPos4d
kernel32
CompareStringW
SetEnvironmentVariableA
GetModuleHandleW
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
HeapAlloc
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
LoadLibraryW
GetCPInfo
HeapFree
WriteConsoleA
GetStdHandle
CreateEventW
GetStartupInfoW
LocalReAlloc
SearchPathW
GetFileAttributesW
OpenMutexW
GetMailslotInfo
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
WideCharToMultiByte
GetTimeZoneInformation
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
Sleep
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ