Static task
static1
Behavioral task
behavioral1
Sample
245614c7f08c52fecf0a8d533ec2a13f7035db6909a897f3c7eeddc7e2efddf2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
245614c7f08c52fecf0a8d533ec2a13f7035db6909a897f3c7eeddc7e2efddf2.exe
Resource
win10v2004-20220812-en
General
-
Target
245614c7f08c52fecf0a8d533ec2a13f7035db6909a897f3c7eeddc7e2efddf2
-
Size
211KB
-
MD5
4a5cd8c7e4315729de9becadb06ac2d0
-
SHA1
7e5b39896fe7f4729d6afafe0efe537d0a458937
-
SHA256
245614c7f08c52fecf0a8d533ec2a13f7035db6909a897f3c7eeddc7e2efddf2
-
SHA512
5b6e633eae0dae805dfe72d6d9e762b95553beb3cba483888fe0fa2fc949fe07d9c97ae96cb0740809e818ea54ed5894b435ca643da54bfee6cad1f709b5ba43
-
SSDEEP
6144:L0Utun90CMgVvcLGxOk/Xs5KpeNHYzZYBZIl:L0UGt0LGxxc5t1Y1YBCl
Malware Config
Signatures
Files
-
245614c7f08c52fecf0a8d533ec2a13f7035db6909a897f3c7eeddc7e2efddf2.exe windows x86
6f4acdfc103c6f065349b595331b6721
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
WideCharToMultiByte
LeaveCriticalSection
DeleteCriticalSection
GlobalMemoryStatus
IsBadCodePtr
lstrlenW
FreeLibrary
CreateEventW
SetEvent
SetFilePointer
GlobalLock
MulDiv
CreateSemaphoreW
EnterCriticalSection
GetTickCount
WaitForSingleObject
GetThreadPriority
CreateFileW
CloseHandle
GetProcessHeap
GetPrivateProfileStringW
GetCurrentThread
InterlockedIncrement
DeleteFileW
MultiByteToWideChar
ResetEvent
GetCurrentProcess
GetSystemInfo
LoadLibraryW
InterlockedDecrement
lstrcmpiW
VirtualFree
lstrcpynW
GetModuleFileNameA
GetVersionExW
SetThreadPriority
CreateThread
HeapAlloc
ReadFile
GetQueuedCompletionStatus
GetSystemTimeAsFileTime
SetEndOfFile
GetLastError
HeapFree
GlobalAlloc
GetTimeZoneInformation
GetFileSize
GetFileAttributesW
GetModuleHandleA
SetUnhandledExceptionFilter
GlobalHandle
GlobalFree
GetFullPathNameW
GetProfileIntA
GetEnvironmentStringsW
GetCurrentProcessId
lstrcpyA
WaitForMultipleObjects
InitializeCriticalSection
InterlockedExchange
WriteFile
lstrcpyW
ReleaseSemaphore
GetDiskFreeSpaceW
QueryPerformanceCounter
IsBadWritePtr
lstrlenA
lstrcmpW
GlobalUnlock
user32
EnableWindow
CreateDialogParamW
DispatchMessageW
ReleaseDC
MoveWindow
SetCursor
SetDlgItemInt
InvalidateRect
LoadCursorW
IsWindowVisible
CheckDlgButton
TranslateMessage
GetDlgItem
GetWindowRect
GetDlgItemInt
DestroyWindow
GetWindowLongW
GetDC
GetClientRect
IsRectEmpty
ClientToScreen
PeekMessageW
CheckRadioButton
SetDlgItemTextW
LoadStringW
DefWindowProcW
GetDesktopWindow
IsWindow
GetAsyncKeyState
SetWindowLongW
ShowWindow
SendMessageW
msoeacct
DllGetClassObject
DllCanUnloadNow
ValidEmailAddress
GetDllMajorVersion
HrCreateAccountManager
msls31
LssbGetVisibleDcpInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetDurTrailWithPensInSubline
LssbGetPlsrunsFromSubline
LsCompressSubline
oleaut32
VarBstrFromR4
VarBstrFromDec
VarBstrFromCy
VarBstrFromDate
VarBstrFromUI2
VarBstrFromDisp
VarBstrFromI4
VarBstrFromR8
VarBstrFromI2
VarBstrFromI1
VarBstrFromUI1
VarBstrFromI8
VarBstrFromUI4
VarBstrFromUI8
nddeapi
NDdeGetErrorStringA
NDdeIsValidAppTopicListA
NDdeGetTrustedShareW
NDdeGetShareSecurityW
NDdeIsValidAppTopicListW
NDdeGetTrustedShareA
msnetobj
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
cewmdm
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
msltus40
DllUnregisterServer
DllRegisterServer
msoert2
AppendTempFileList
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ