Static task
static1
Behavioral task
behavioral1
Sample
4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75.exe
Resource
win10v2004-20220812-en
General
-
Target
4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75
-
Size
416KB
-
MD5
0163019ec9fb8a25df53ad8532e2f34b
-
SHA1
319c9ae68f48a3d1ff5d0f84a0e040333b409240
-
SHA256
4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75
-
SHA512
37b1b2112231bd45e1a8ef14f0d07e47fe2d98da25702ff2e1e68341d4666f367972c2dd454de8ba4f468be9ad597b6c2e1955dd001ab658b122480488e093ba
-
SSDEEP
6144:abrapbbWZc4cyQlTgALXqo1jmUZxL6xQGQgg:afc6ZIPZNLXqs76P
Malware Config
Signatures
Files
-
4201bd3a4e8972417cec432d792fd70f0c73056464163728d75aa584b9d38c75.exe windows x86
e02394267a6b9e55777d856c546d7799
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCurrentThread
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
SizeofResource
GetProcessVersion
GetLastError
SetLastError
WritePrivateProfileStringA
GlobalFlags
MulDiv
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GlobalUnlock
CloseHandle
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
SetHandleCount
GetStdHandle
GetCurrentThreadId
CompareFileTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
GetFileAttributesA
CopyFileA
GetProfileStringA
GetVersion
GetProcAddress
LoadLibraryA
WinExec
InterlockedExchange
user32
SetFocus
AdjustWindowRectEx
GetSysColor
SendDlgItemMessageA
UpdateWindow
DrawFocusRect
MapWindowPoints
FillRect
PtInRect
InvalidateRect
SetWindowTextA
ShowWindow
LoadStringA
GetClientRect
GetClassNameA
GetDC
IsDialogMessageA
GetWindowDC
ClientToScreen
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetSysColorBrush
DestroyMenu
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
ReleaseDC
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
BeginPaint
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
DefWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetWindowPos
WindowFromPoint
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
PostQuitMessage
PostMessageA
EnableWindow
SetCursor
ScreenToClient
SendMessageA
LoadIconA
CopyRect
LoadCursorA
GetTopWindow
GetMenuItemID
GetCapture
GetMessagePos
RegisterWindowMessageA
CallWindowProcA
ExcludeUpdateRgn
InflateRect
IsWindowUnicode
CharNextA
UnregisterClassA
DefDlgProcA
ShowCaret
HideCaret
gdi32
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
GetTextMetricsA
DeleteDC
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateDIBitmap
GetTextExtentPointA
PatBlt
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
comctl32
ord17
Sections
.text Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE