Static task
static1
Behavioral task
behavioral1
Sample
4204b8f1e0578d46d8dbef3633b053b93837ab4ee496514525e04d17f5f7f05e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4204b8f1e0578d46d8dbef3633b053b93837ab4ee496514525e04d17f5f7f05e.exe
Resource
win10v2004-20220901-en
General
-
Target
4204b8f1e0578d46d8dbef3633b053b93837ab4ee496514525e04d17f5f7f05e
-
Size
312KB
-
MD5
462e11bcefcfc1ff159d8ac4521c7995
-
SHA1
9e4fec885b8b8732ae77b4bc1d0d6526b33da64c
-
SHA256
4204b8f1e0578d46d8dbef3633b053b93837ab4ee496514525e04d17f5f7f05e
-
SHA512
4e02a1a39aea0fb1741f70cf942298ce476a6d41cc1b7049cd73840d7abfe019e6b5490c58bcc634df340a4d1058e59dc0dba6d67f5dbe1be4a0de3bb2fbb85b
-
SSDEEP
6144:Ylt9fLH1arlu1E+BW3bFeFGZdtMrXDa+PossmRjfmMeg0+p1:Etl1BLBWxI8darTPgmRjes0u1
Malware Config
Signatures
Files
-
4204b8f1e0578d46d8dbef3633b053b93837ab4ee496514525e04d17f5f7f05e.exe windows x86
f8671f08247cb4b7757a411ef0348b3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateFontIndirectW
user32
InflateRect
OffsetRect
LoadMenuW
EnableMenuItem
HiliteMenuItem
GetClientRect
GetTopWindow
GetDlgCtrlID
GetWindow
SystemParametersInfoW
GetDesktopWindow
GetDC
ReleaseDC
MessageBoxW
GetWindowLongW
wsprintfW
GetSystemMetrics
SendDlgItemMessageW
GetDlgItem
SendMessageW
LoadStringW
SetWindowLongW
ShowWindow
SetWindowPos
MapWindowPoints
GetWindowRect
SendMessageTimeoutW
ChangeDisplaySettingsW
EnumDisplaySettingsW
LoadIconW
GetForegroundWindow
GetFocus
SetFocus
FillRect
DrawFrameControl
DestroyIcon
DrawTextW
DrawEdge
InvalidateRect
DefWindowProcW
EndPaint
BeginPaint
GetSysColor
RegisterClassW
LoadCursorW
PostMessageW
SwapMouseButton
GetParent
SetWindowTextW
EnableWindow
SetDlgItemTextW
SetCaretBlinkTime
KillTimer
SetTimer
LoadImageW
GetClassNameA
SetSysColors
kernel32
GetTickCount
OpenEventW
SetEvent
CreateDirectoryW
GlobalUnlock
WaitForSingleObject
CreateEventW
GetFileAttributesW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFileEx
InitializeCriticalSectionAndSpinCount
FormatMessageA
DisableThreadLibraryCalls
LoadLibraryW
FreeLibrary
GetShortPathNameW
HeapDestroy
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LocalAlloc
GetNumberFormatW
GetVersionExW
ReadFile
GetFileSize
CreateFileW
lstrlenW
GetCommandLineW
GetStartupInfoA
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
Sleep
QueryPerformanceCounter
WriteProfileStringW
lstrcmpiW
MulDiv
WriteFile
CloseHandle
lstrcatW
InterlockedCompareExchange
FreeConsole
GetLastError
GetLocaleInfoW
SetLastError
GetProcAddress
GetModuleHandleW
lstrcpyW
lstrcmpW
msvcrt
_onexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
malloc
free
isalpha
__dllonexit
advapi32
GetLengthSid
InitializeAcl
AddAccessAllowedAce
RegSetValueExA
AllocateAndInitializeSid
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Hnat Size: 4KB - Virtual size: 201B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdgsDF Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3GKeci Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ