Static task
static1
Behavioral task
behavioral1
Sample
f4ee273f412017ec84e8d76513cbb4138aaf8cb53c21aeabf868de12777a78cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4ee273f412017ec84e8d76513cbb4138aaf8cb53c21aeabf868de12777a78cb.exe
Resource
win10v2004-20220901-en
General
-
Target
f4ee273f412017ec84e8d76513cbb4138aaf8cb53c21aeabf868de12777a78cb
-
Size
90KB
-
MD5
6893ad965d487c8fa7a8b349eab361a1
-
SHA1
a8d3cda42f4087d03d799400753d8561e5811e39
-
SHA256
f4ee273f412017ec84e8d76513cbb4138aaf8cb53c21aeabf868de12777a78cb
-
SHA512
57c9d8062b2bad3206adc02e95c4b7ba317e2fc47ecd882c26b654e84d48916c48149e2f4c2c7d26dd9c444be9882f92a11b29850cce6aec07d8fab30544c7d5
-
SSDEEP
1536:wF+y2lg70vAj5P/sGUiz1mDF9cJgwPuepPneVUvphf1Gy7NyQzENiFTS9AQay:xyz19EpuuedOWphN3VoNoTS9AQb
Malware Config
Signatures
Files
-
f4ee273f412017ec84e8d76513cbb4138aaf8cb53c21aeabf868de12777a78cb.exe windows x86
fdc371be71334d2f72f6564a63ce6d6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetClassLongA
SetDlgItemTextA
CreateWindowExA
EndPaint
EnumWindows
GetPropA
GetSysColor
InsertMenuA
EndDialog
GetSystemMetrics
WindowFromPoint
SetMenu
SetScrollInfo
FrameRect
UpdateWindow
GetScrollInfo
msvcrt
_onexit
_except_handler3
calloc
strstr
signal
_snprintf
free
__p__fmode
_exit
__getmainargs
sqrt
getenv
_acmdln
__setusermatherr
fread
__set_app_type
_initterm
fwrite
__p__commode
_setmode
_strnicmp
_adjust_fdiv
comdlg32
GetOpenFileNameA
kernel32
GetNumberFormatA
GetCurrentProcessId
GetStartupInfoA
VirtualQuery
SetFileTime
SetEnvironmentVariableA
GetModuleFileNameA
IsValidCodePage
GetModuleHandleW
SetFilePointer
CompareFileTime
FileTimeToLocalFileTime
GetShortPathNameA
GlobalUnlock
GetFullPathNameA
VirtualProtect
GlobalLock
gdi32
GetDCOrgEx
GetTextExtentPointA
CreateDCA
CreateFontA
GetCurrentObject
PolyDraw
CreateRectRgnIndirect
RoundRect
CreateICW
CreateHalftonePalette
MoveToEx
GetMetaFileBitsEx
GetBitmapBits
advapi32
DeleteService
AddAccessAllowedAce
InitializeAcl
RegDeleteValueW
CryptAcquireContextA
SetSecurityDescriptorGroup
RegEnumKeyW
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
OpenThreadToken
RevertToSelf
ole32
CoRegisterClassObject
CoGetClassObject
CoReleaseMarshalData
IIDFromString
CoTaskMemFree
GetRunningObjectTable
IsAccelerator
RegisterDragDrop
OleDraw
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
StringFromGUID2
OleFlushClipboard
StringFromIID
CreateBindCtx
comctl32
ImageList_DragLeave
ImageList_EndDrag
ImageList_Add
ImageList_Read
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_GetBkColor
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ