Static task
static1
Behavioral task
behavioral1
Sample
4438d7d35aa83e0f7d3027af883f3f4d243b452f64fbd2a47322182a37390767.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4438d7d35aa83e0f7d3027af883f3f4d243b452f64fbd2a47322182a37390767.exe
Resource
win10v2004-20220812-en
General
-
Target
4438d7d35aa83e0f7d3027af883f3f4d243b452f64fbd2a47322182a37390767
-
Size
153KB
-
MD5
63ab864a9cf8b2119d39d85717f437e0
-
SHA1
1e1e7dcfb8967c7a008a7e1cdec1b61abaa2570b
-
SHA256
4438d7d35aa83e0f7d3027af883f3f4d243b452f64fbd2a47322182a37390767
-
SHA512
1cf55eeada3856eec91879c79d7ea452bc5369920cd9eb52a4079bff6e3c0e66578a35be7d165e3498485595d230dfa1f51d45b1ac14c53abc4e77588f6b311f
-
SSDEEP
3072:9SEfP4IV5qOC9nTuA4idZ9fvnZxbBMBIuY5QrZUgSbFM3GoEm1DCUc:Zp5If3BMBSQrZrSkmR
Malware Config
Signatures
Files
-
4438d7d35aa83e0f7d3027af883f3f4d243b452f64fbd2a47322182a37390767.exe windows x86
d39ac2efb00cd565deb69575f8206900
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
KillTimer
GetDesktopWindow
DrawMenuBar
GetMessageA
LoadCursorA
ClientToScreen
GetKeyState
FindWindowA
SetWindowTextA
GetKeyboardType
GetSysColor
OffsetRect
WindowFromPoint
LoadIconA
GetClassInfoA
CharLowerA
TrackPopupMenu
GetPropA
CloseClipboard
GetCursorPos
MessageBeep
IsWindow
AdjustWindowRectEx
UpdateWindow
UnhookWindowsHookEx
GetSysColorBrush
GetSystemMetrics
kernel32
GetLocaleInfoW
GetStringTypeA
SetFilePointer
VirtualProtect
GlobalReAlloc
FileTimeToLocalFileTime
GetCurrentProcess
InterlockedCompareExchange
LocalAlloc
GetModuleHandleW
SystemTimeToFileTime
GlobalLock
GetThreadLocale
GlobalUnlock
GetVersion
GetSystemTime
GetModuleHandleA
MulDiv
QueryPerformanceCounter
GetUserDefaultLangID
GetTempFileNameA
RtlUnwind
lstrlenW
msvcrt
fputs
atoi
_adjust_fdiv
fprintf
__set_app_type
_XcptFilter
_strnicmp
__setusermatherr
fread
_write
__p__commode
_errno
__p__fmode
realloc
strlen
__p___initenv
malloc
__dllonexit
memmove
sprintf
_except_handler3
_exit
_initterm
fputc
strncmp
__getmainargs
_controlfp
calloc
advapi32
GetUserNameA
OpenServiceA
RegDeleteValueW
CopySid
CheckTokenMembership
RegDeleteValueA
InitiateSystemShutdownA
CryptReleaseContext
GetLengthSid
SetSecurityDescriptorOwner
RegOpenKeyA
RegDeleteKeyW
DeregisterEventSource
RegCreateKeyA
RegQueryValueExW
RegCreateKeyExA
RegSetValueExA
AllocateAndInitializeSid
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ