Static task
static1
Behavioral task
behavioral1
Sample
472cf383c0e999f7c32e009ef7f7b2cfac81b07d398a302dcfd3466dae8a321b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
472cf383c0e999f7c32e009ef7f7b2cfac81b07d398a302dcfd3466dae8a321b.exe
Resource
win10v2004-20220901-en
General
-
Target
472cf383c0e999f7c32e009ef7f7b2cfac81b07d398a302dcfd3466dae8a321b
-
Size
324KB
-
MD5
41bf453c3940adc5f687762bce445080
-
SHA1
746aa0e88530f5933525a567edc632e220936ed5
-
SHA256
472cf383c0e999f7c32e009ef7f7b2cfac81b07d398a302dcfd3466dae8a321b
-
SHA512
75a78476cdf764ce9996c94276302e5cc3c18d9a05e16a6eac33c6bc575577216b2ec8bd229cc09fb604b549ef71a34ec0d241e8c60d5636a41df83f2272e1b7
-
SSDEEP
6144:9k4hzpJcCUPNo01jpXe3V9Vx9tYu+2qAgAUtr:2qJc3PNo01NXqV9VPtYv2q3T
Malware Config
Signatures
Files
-
472cf383c0e999f7c32e009ef7f7b2cfac81b07d398a302dcfd3466dae8a321b.exe windows x86
7c10391ef06240264015ee78da8c1ddf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
GetClipRgn
GetCurrentObject
GetDeviceCaps
GetFontLanguageInfo
GetGraphicsMode
GetMapMode
GetMetaRgn
GetNearestColor
GetNearestPaletteIndex
GetPolyFillMode
GetRandomRgn
GetStretchBltMode
GetSystemPaletteUse
GetTextAlign
GetTextCharset
GetTextCharsetInfo
GetTextColor
SetPixel
SetTextCharacterExtra
kernel32
CloseHandle
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FindClose
FindResourceA
FlushFileBuffers
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetFileTime
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetTickCount
GetVersion
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadResource
LocalFlags
LockResource
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
_fgetwchar
_itoa
_memicmp
_popen
_putenv
_strdup
_stricoll
_strlwr
_strnicmp
_strset
_strupr
_tempnam
_unlink
_write
__doserrno
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__p__tzname
__p__winminor
__p__winver
__set_app_type
_cexit
_ecvt
_errno
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fpclass
_fullpath
_getw
_getws
_iob
_isnan
_localtime64
_ltoa
_ltow
_memccpy
_onexit
_searchenv
_seterrormode
_setmode
_sleep
_snwprintf
_splitpath
_stat64
_strdate
_strrev
_strset
_strupr
_swab
_tempnam
_time64
_wcsdup
_wcsicmp
_wcsicoll
_wcsnicmp
_wcsrev
_wctime64
_wfopen
_wfreopen
_wfsopen
_wpopen
_wsplitpath
_wstrdate
_wtmpnam
abort
asctime
atexit
atof
atoi
atol
calloc
difftime
exit
fclose
fflush
fgetpos
fopen
fputc
fputs
fputws
fread
free
fwrite
getenv
isspace
localeconv
malloc
mblen
mbstowcs
mbtowc
memchr
memcmp
memcpy
memmove
memset
putwc
rand
realloc
setlocale
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strerror
strlen
strncpy
strstr
strtol
strtoul
swscanf
system
tolower
vfprintf
wcslen
wcstombs
user32
BeginPaint
CallWindowProcA
CheckDlgButton
DrawTextA
EnableWindow
EndDialog
GetCursor
GetDC
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetForegroundWindow
GetInputState
GetKeyboardType
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetPropA
GetQueueStatus
GetScrollPos
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
IsWindowEnabled
IsWindowUnicode
PostMessageA
SetDlgItemTextA
SetFocus
SetWindowTextA
ShowWindow
WindowFromDC
Sections
.text Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE