Static task
static1
Behavioral task
behavioral1
Sample
4b465d8ba63bf58dcf9799e9eb7712974630f0fe769e63d2b780bfbd5fa5e34f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4b465d8ba63bf58dcf9799e9eb7712974630f0fe769e63d2b780bfbd5fa5e34f.exe
Resource
win10v2004-20220812-en
General
-
Target
4b465d8ba63bf58dcf9799e9eb7712974630f0fe769e63d2b780bfbd5fa5e34f
-
Size
176KB
-
MD5
417cd5105f23afb5d6599fe5b6616480
-
SHA1
d4b4138b9d86876339d6db6750c6db3edf7ba367
-
SHA256
4b465d8ba63bf58dcf9799e9eb7712974630f0fe769e63d2b780bfbd5fa5e34f
-
SHA512
d889f27b917f3ec06854ff1280cc4b4d58b4cd88cecbf01f0814d1f7df810683a98e5c36cd025e9028b9aa7024f8cbedc9ede6ef61c930d3d76347bd7a78007f
-
SSDEEP
3072:H1SbRQCbzEyNh16YeGIpY72A3+To3jroT/DeZLckv6G7ok:VS9IyNmYeW72s22rNS
Malware Config
Signatures
Files
-
4b465d8ba63bf58dcf9799e9eb7712974630f0fe769e63d2b780bfbd5fa5e34f.exe windows x86
eaeb3a40676da4eb3d7c79f262b1a776
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleA
ResetEvent
lstrlenW
WaitForSingleObject
SetEnvironmentVariableA
GetSystemInfo
CreateFileW
GetSystemTime
GetVersionExA
CompareStringW
GetFileAttributesW
SizeofResource
ReadFileEx
SetFilePointer
SetErrorMode
GetModuleFileNameW
GlobalLock
GetFileAttributesA
LocalFree
ReleaseMutex
CreateFileA
FreeLibrary
FlushFileBuffers
LoadResource
CreateEventW
SetEvent
SetEndOfFile
RaiseException
FreeEnvironmentStringsA
SetStdHandle
InterlockedExchangeAdd
GlobalUnlock
DeleteFileA
CompareStringA
GetLocalTime
FindClose
GetThreadLocale
CreateThread
InterlockedCompareExchange
TryEnterCriticalSection
SetFilePointerEx
LocalAlloc
FormatMessageW
LockResource
GetFileSize
ReadFile
RegisterWaitForSingleObject
lstrlenA
CloseHandle
FormatMessageA
HeapDestroy
GlobalFree
WriteFileEx
GlobalAlloc
WaitForSingleObjectEx
FindCloseChangeNotification
GetFileSizeEx
InterlockedExchange
CreateEventA
SleepEx
WaitForMultipleObjectsEx
InitializeCriticalSection
DeleteFileW
GetStartupInfoA
user32
DefWindowProcA
DestroyMenu
AdjustWindowRectEx
MessageBeep
SetActiveWindow
CreateWindowExA
GetKeyState
AllowSetForegroundWindow
OffsetRect
ClientToScreen
ReleaseCapture
PostMessageW
GetMenuStringW
PtInRect
GetSubMenu
UnregisterClassA
SetCapture
InflateRect
CheckMenuItem
MoveWindow
DrawFocusRect
SetWindowLongW
TrackPopupMenu
GetActiveWindow
GetMenu
SetMenuItemInfoA
SetWindowLongA
LoadIconW
GetCursorPos
DestroyWindow
ShowWindowAsync
SendMessageA
GetClientRect
RegisterClassA
TranslateMessage
LoadStringA
SetWindowPos
GetWindowTextW
GetMenuItemCount
ReleaseDC
SetWindowTextA
SetWindowTextW
CreateWindowExW
PostMessageA
GetForegroundWindow
LoadCursorW
DefWindowProcW
SetMenuItemInfoW
GetWindowWord
SetMenuItemBitmaps
DestroyIcon
msi
ord216
msvcrt
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
_c_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
__setusermatherr
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ