Static task
static1
Behavioral task
behavioral1
Sample
4ab985f9456c345cdd3e9d93bfb8b787b72a8c5139e712193951662ff649526c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ab985f9456c345cdd3e9d93bfb8b787b72a8c5139e712193951662ff649526c.exe
Resource
win10v2004-20220812-en
General
-
Target
4ab985f9456c345cdd3e9d93bfb8b787b72a8c5139e712193951662ff649526c
-
Size
140KB
-
MD5
6e07f693207cd3e15dde24bca2a9ce10
-
SHA1
f787c452f48e647ee065d406119931877d2035f6
-
SHA256
4ab985f9456c345cdd3e9d93bfb8b787b72a8c5139e712193951662ff649526c
-
SHA512
5bd415dcfd02b4d39246121b409250b533a7190a6d01a9001b6563781c07500df037860a39c9bd997ca8c88758e8cb7d8254577e9436d10e7b520d8f5f0c9361
-
SSDEEP
3072:YMRavGELkxwqaxigmiHVaALPeNbXEm0oZBIhqG7P2vwocRkG:YMRYBwm//d1aAj2bXEm56hqS2vC
Malware Config
Signatures
Files
-
4ab985f9456c345cdd3e9d93bfb8b787b72a8c5139e712193951662ff649526c.exe windows x86
9f54399bb3c47e2dc7ca0520dd8e323f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetCurrentDirectoryA
VirtualProtect
GetStdHandle
GetCurrentThread
TlsFree
SetConsoleCtrlHandler
FindResourceW
SetStdHandle
GetLocaleInfoA
UnhandledExceptionFilter
HeapDestroy
IsDebuggerPresent
GetProcessHeap
GlobalAlloc
HeapFree
QueryPerformanceFrequency
FileTimeToLocalFileTime
GetCPInfo
CloseHandle
WriteConsoleW
SetEndOfFile
GetEnvironmentStringsW
GetModuleFileNameA
UnmapViewOfFile
lstrlenA
MultiByteToWideChar
GetStringTypeA
LCMapStringA
CompareStringA
TlsGetValue
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
LockResource
GetCurrentThreadId
SetHandleCount
GetCurrentProcess
lstrcatA
FreeLibrary
SetCurrentDirectoryA
VirtualAlloc
FreeEnvironmentStringsW
lstrcpynA
SetLastError
GetEnvironmentStrings
HeapCreate
CreateFileA
lstrcpyA
GetCurrentProcessId
FreeEnvironmentStringsA
GetModuleHandleW
LoadLibraryA
WideCharToMultiByte
GetFileSize
MulDiv
TerminateProcess
LCMapStringW
GetStringTypeW
lstrcmpA
TlsSetValue
GetLocaleInfoW
GetTimeZoneInformation
Sleep
GetStartupInfoA
GetSystemTimeAsFileTime
GetModuleHandleA
DeleteCriticalSection
MapViewOfFile
GetCommandLineA
GetProcAddress
SetEnvironmentVariableA
QueryPerformanceCounter
IsBadReadPtr
GetUserDefaultLCID
IsValidCodePage
InterlockedIncrement
HeapAlloc
InitializeCriticalSection
GetFullPathNameA
GetPrivateProfileStringW
GetSystemDirectoryW
GetPrivateProfileIntW
lstrcpyW
InterlockedExchange
GlobalFree
GetOEMCP
LoadResource
GlobalUnlock
GlobalLock
HeapReAlloc
FindResourceA
CreateFileMappingA
FindNextFileA
SetUnhandledExceptionFilter
GetConsoleOutputCP
SizeofResource
GetConsoleCP
GetACP
SetFilePointer
OutputDebugStringA
FlushFileBuffers
TlsAlloc
LeaveCriticalSection
RtlUnwind
CompareStringW
GetDriveTypeA
VirtualFree
CreateFileW
ExitProcess
GetTimeFormatA
GetFileType
ReadFile
VirtualQuery
FindFirstFileA
EnterCriticalSection
GetLastError
GetDateFormatA
HeapSize
RaiseException
GetVersionExA
InterlockedDecrement
IsValidLocale
FileTimeToSystemTime
FatalAppExitA
GetConsoleMode
FindClose
EnumSystemLocalesA
WriteConsoleA
WriteFile
user32
RegisterClipboardFormatA
GetCursorPos
RedrawWindow
DialogBoxParamA
PostMessageA
GetClassInfoA
DrawTextW
LoadCursorA
GetClientRect
SetClassLongA
GetWindowRgn
wsprintfA
GetCapture
DispatchMessageA
GetSubMenu
SystemParametersInfoA
CreateDialogIndirectParamA
GetActiveWindow
SetWindowTextA
SetWindowRgn
SetCursorPos
DestroyMenu
SetCursor
SetWindowLongA
OpenClipboard
GetClassNameA
ReleaseCapture
DestroyWindow
SetForegroundWindow
GetSystemMetrics
IsWindowVisible
GetMessageA
SetFocus
DrawTextA
SetDlgItemTextA
CloseClipboard
SendMessageA
IntersectRect
PtInRect
DefWindowProcA
ReleaseDC
GetDlgItemTextA
ShowWindow
LoadAcceleratorsA
GetForegroundWindow
GetKeyboardLayout
GetClassLongA
mouse_event
CreateWindowExA
EnumWindows
IsWindowEnabled
GetWindowRect
IsWindow
EnumChildWindows
TranslateAcceleratorA
CheckRadioButton
EnableWindow
MessageBoxA
GetDesktopWindow
ShowCursor
LoadStringA
EnumDisplayDevicesA
GetWindowPlacement
GetDlgItem
SetWindowPos
GetFocus
SetClipboardData
MoveWindow
EnumDisplaySettingsA
AdjustWindowRect
PostQuitMessage
GetIconInfo
CallWindowProcA
ScreenToClient
GetKeyState
GetWindow
ClientToScreen
LoadIconA
TrackPopupMenuEx
RegisterClassA
TranslateMessage
SetCapture
LoadMenuA
GetWindowLongA
EndDialog
GetDC
PeekMessageA
IsIconic
GetAsyncKeyState
OffsetRect
GetWindowTextA
GetParent
GetMenu
SetRect
gdi32
GetDCOrgEx
CreateRectRgnIndirect
CreateRectRgn
SetBkColor
SelectObject
GetCharWidthA
CreatePolygonRgn
ExtEscape
ExtTextOutA
GetDIBits
GetObjectA
SetMapMode
BeginPath
SetTextAlign
SetTextColor
GetTextMetricsA
CombineRgn
CreateDIBSection
TextOutA
GetStockObject
PtInRegion
CreateFontIndirectA
DeleteDC
GetDeviceCaps
CreateDCA
CreateFontA
SetBkMode
GetPath
CreateCompatibleDC
DeleteObject
EndPath
GetTextExtentPoint32A
GetClipBox
advapi32
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
ole32
CoInitialize
CoCreateInstance
OleGetClipboard
CoUninitialize
winmm
timeGetTime
iphlpapi
AddIPAddress
avifil32
AVIFileAddRef
mprapi
MprAdminBufferFree
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idat_0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ