Static task
static1
Behavioral task
behavioral1
Sample
4d73cfde221e790187bac1c79ada4f1e6e5c3fa8cda6fadd36ee9fbe2b0df051.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d73cfde221e790187bac1c79ada4f1e6e5c3fa8cda6fadd36ee9fbe2b0df051.exe
Resource
win10v2004-20220812-en
General
-
Target
4d73cfde221e790187bac1c79ada4f1e6e5c3fa8cda6fadd36ee9fbe2b0df051
-
Size
211KB
-
MD5
6f9acc8aed26d0a46a359b8c5ddd766e
-
SHA1
482009467e449404500dce5166e6972f51ab23a5
-
SHA256
4d73cfde221e790187bac1c79ada4f1e6e5c3fa8cda6fadd36ee9fbe2b0df051
-
SHA512
562ccdf25db83c1ca542d44217614fa4fa9f8def9501e4f072e287d355e05289b29f5da126f53b05d23a6c91e687348e010669c27c6e918c8f93d080ce1fe062
-
SSDEEP
6144:L0Utun90CMgVvcLGxOk/Xs5KpeNHYzZYBZIJ:L0UGt0LGxxc5t1Y1YBCJ
Malware Config
Signatures
Files
-
4d73cfde221e790187bac1c79ada4f1e6e5c3fa8cda6fadd36ee9fbe2b0df051.exe windows x86
6f4acdfc103c6f065349b595331b6721
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
WideCharToMultiByte
LeaveCriticalSection
DeleteCriticalSection
GlobalMemoryStatus
IsBadCodePtr
lstrlenW
FreeLibrary
CreateEventW
SetEvent
SetFilePointer
GlobalLock
MulDiv
CreateSemaphoreW
EnterCriticalSection
GetTickCount
WaitForSingleObject
GetThreadPriority
CreateFileW
CloseHandle
GetProcessHeap
GetPrivateProfileStringW
GetCurrentThread
InterlockedIncrement
DeleteFileW
MultiByteToWideChar
ResetEvent
GetCurrentProcess
GetSystemInfo
LoadLibraryW
InterlockedDecrement
lstrcmpiW
VirtualFree
lstrcpynW
GetModuleFileNameA
GetVersionExW
SetThreadPriority
CreateThread
HeapAlloc
ReadFile
GetQueuedCompletionStatus
GetSystemTimeAsFileTime
SetEndOfFile
GetLastError
HeapFree
GlobalAlloc
GetTimeZoneInformation
GetFileSize
GetFileAttributesW
GetModuleHandleA
SetUnhandledExceptionFilter
GlobalHandle
GlobalFree
GetFullPathNameW
GetProfileIntA
GetEnvironmentStringsW
GetCurrentProcessId
lstrcpyA
WaitForMultipleObjects
InitializeCriticalSection
InterlockedExchange
WriteFile
lstrcpyW
ReleaseSemaphore
GetDiskFreeSpaceW
QueryPerformanceCounter
IsBadWritePtr
lstrlenA
lstrcmpW
GlobalUnlock
user32
EnableWindow
CreateDialogParamW
DispatchMessageW
ReleaseDC
MoveWindow
SetCursor
SetDlgItemInt
InvalidateRect
LoadCursorW
IsWindowVisible
CheckDlgButton
TranslateMessage
GetDlgItem
GetWindowRect
GetDlgItemInt
DestroyWindow
GetWindowLongW
GetDC
GetClientRect
IsRectEmpty
ClientToScreen
PeekMessageW
CheckRadioButton
SetDlgItemTextW
LoadStringW
DefWindowProcW
GetDesktopWindow
IsWindow
GetAsyncKeyState
SetWindowLongW
ShowWindow
SendMessageW
msoeacct
DllGetClassObject
DllCanUnloadNow
ValidEmailAddress
GetDllMajorVersion
HrCreateAccountManager
msls31
LssbGetVisibleDcpInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetDurTrailWithPensInSubline
LssbGetPlsrunsFromSubline
LsCompressSubline
oleaut32
VarBstrFromR4
VarBstrFromDec
VarBstrFromCy
VarBstrFromDate
VarBstrFromUI2
VarBstrFromDisp
VarBstrFromI4
VarBstrFromR8
VarBstrFromI2
VarBstrFromI1
VarBstrFromUI1
VarBstrFromI8
VarBstrFromUI4
VarBstrFromUI8
nddeapi
NDdeGetErrorStringA
NDdeIsValidAppTopicListA
NDdeGetTrustedShareW
NDdeGetShareSecurityW
NDdeIsValidAppTopicListW
NDdeGetTrustedShareA
msnetobj
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
cewmdm
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
msltus40
DllUnregisterServer
DllRegisterServer
msoert2
AppendTempFileList
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ