Static task
static1
Behavioral task
behavioral1
Sample
4f37408fd110ee59c0c7c5f06376e4e73e6df62e4ec8e2f1847204425f02fe24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f37408fd110ee59c0c7c5f06376e4e73e6df62e4ec8e2f1847204425f02fe24.exe
Resource
win10v2004-20220812-en
General
-
Target
4f37408fd110ee59c0c7c5f06376e4e73e6df62e4ec8e2f1847204425f02fe24
-
Size
120KB
-
MD5
6982a312d31ce06da7f1c1e1923c5ea0
-
SHA1
1182b47e38fd6437defe1c4c20d560a4a17262dd
-
SHA256
4f37408fd110ee59c0c7c5f06376e4e73e6df62e4ec8e2f1847204425f02fe24
-
SHA512
858fbc811826e8d458c496b23917c50f886dcf393b824c9670bcfc1392de2e8abe8bfb0c750b74b38a1425ac6c994cd7f8a947e468e0640013966b7fd0a18760
-
SSDEEP
3072:cNOkSe3h15sRPHBST1Qr8PKOvEJRAw+W0:c7Se3081K8PKr
Malware Config
Signatures
Files
-
4f37408fd110ee59c0c7c5f06376e4e73e6df62e4ec8e2f1847204425f02fe24.exe windows x86
24a50075646c25fddbfef9e5d61efa5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
GetFileType
VirtualProtect
FlushFileBuffers
GetSystemDefaultLCID
GetSystemDirectoryW
LCMapStringA
GetStdHandle
CreateFileMappingA
GetVersionExA
GetModuleHandleA
GetConsoleOutputCP
user32
GetWindowRect
DrawFrameControl
CreateWindowExA
GetSystemMetrics
LoadCursorA
GetWindowTextA
GetTopWindow
KillTimer
CheckMenuItem
msvcrt
log10
clearerr
_controlfp
__getmainargs
exit
_initterm
_adjust_fdiv
_snprintf
strtoul
__set_app_type
__p__commode
_acmdln
_XcptFilter
__setusermatherr
isleadbyte
_except_handler3
__p__fmode
version
GetFileVersionInfoA
VerLanguageNameA
VerInstallFileW
VerInstallFileA
VerQueryValueW
VerFindFileW
GetFileVersionInfoW
VerQueryValueA
shell32
DragQueryFileW
SHBindToParent
ExtractIconW
ShellExecuteEx
SHBrowseForFolder
SHGetPathFromIDListW
SHCreateDirectoryExA
ShellExecuteExW
SHGetFolderPathA
advapi32
InitiateSystemShutdownA
CloseServiceHandle
GetUserNameA
RegDeleteValueW
RegCreateKeyExA
CryptAcquireContextA
RegCloseKey
OpenProcessToken
oleaut32
VariantCopy
SysFreeString
SafeArrayCreate
SysAllocStringByteLen
SafeArrayGetElement
SafeArrayPtrOfIndex
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_SetBkColor
ImageList_GetImageInfo
ImageList_GetBkColor
ImageList_DragEnter
DestroyPropertySheetPage
ole32
IIDFromString
RegisterDragDrop
OleRun
OleUninitialize
CoRegisterClassObject
GetRunningObjectTable
OleDraw
CoSetProxyBlanket
CoLoadLibrary
CoDisconnectObject
CoRegisterMessageFilter
CoCreateInstance
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ