Static task
static1
Behavioral task
behavioral1
Sample
4f72d0cc1a912f90e3ed4caa52c1b6f753885ce139c51f5a8adfb0f934d7bbf1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4f72d0cc1a912f90e3ed4caa52c1b6f753885ce139c51f5a8adfb0f934d7bbf1.exe
Resource
win10v2004-20220812-en
General
-
Target
4f72d0cc1a912f90e3ed4caa52c1b6f753885ce139c51f5a8adfb0f934d7bbf1
-
Size
285KB
-
MD5
6b0e1a1b767da8a29da8bdb147c36b10
-
SHA1
06bc255f42c195f17c73c6b30b1d6d78d3932e79
-
SHA256
4f72d0cc1a912f90e3ed4caa52c1b6f753885ce139c51f5a8adfb0f934d7bbf1
-
SHA512
a9098afe13ce87156dcea8ea9d93597fcd33d9965df405a9f7ae6cca9135517983ffa52662c820c0d0dcbe57635d48a7c7435fea5c353b66d148b2b56675452f
-
SSDEEP
6144:30fcSD/4F/V5I3edS69lse5IalJydd4ePAV+qbo62vX30YO4:3Icm4F03US695IacqfVLuf0Z
Malware Config
Signatures
Files
-
4f72d0cc1a912f90e3ed4caa52c1b6f753885ce139c51f5a8adfb0f934d7bbf1.exe windows x86
f4ccc5ffd90c3d576fe39e7e2ad44979
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgA
ChooseColorA
ChooseFontW
PageSetupDlgW
ole32
CoRegisterClassObject
CoTaskMemAlloc
OleBuildVersion
CreateDataCache
CoUninitialize
StgIsStorageFile
CoGetTreatAsClass
CoGetObject
kernel32
HeapSize
LCMapStringW
GetProcessHeap
SetEndOfFile
GetStringTypeW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
ReadFile
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
Sleep
SetFilePointer
WriteConsoleW
IsProcessorFeaturePresent
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
HeapAlloc
HeapReAlloc
CreateFileW
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ