Static task
static1
Behavioral task
behavioral1
Sample
4044ca26f0d8fd8f337fe29fa2ea0150936379fa7d0cf9f0f4097b564c0dc235.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4044ca26f0d8fd8f337fe29fa2ea0150936379fa7d0cf9f0f4097b564c0dc235.exe
Resource
win10v2004-20220901-en
General
-
Target
4044ca26f0d8fd8f337fe29fa2ea0150936379fa7d0cf9f0f4097b564c0dc235
-
Size
265KB
-
MD5
6891d7d2ed5c9e59668f5e419d1b31fb
-
SHA1
1883bc8998af36b0d2e8b476b46c42dca7bc0269
-
SHA256
4044ca26f0d8fd8f337fe29fa2ea0150936379fa7d0cf9f0f4097b564c0dc235
-
SHA512
3936ec4fb6d0714c7fa17224208ba26a14d19c06d74a0fc9695de97423c8f793261d2e3e8a4c28e1a3d337b523b10d29689793f3c386d5c0659ed57f1bc48a46
-
SSDEEP
6144:Xk5KDmbL5Ujj9Fd4F0a7qzdrDTmcYHqqnUMNLNTnupb:XkAMLSd4F0a7mrDefRJqpb
Malware Config
Signatures
Files
-
4044ca26f0d8fd8f337fe29fa2ea0150936379fa7d0cf9f0f4097b564c0dc235.exe windows x86
ca9499c222375f7f25be70c34b449723
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
PropVariantClear
WriteClassStm
OleRun
OleCreateStaticFromData
MkParseDisplayName
user32
CallWindowProcA
CharToOemA
IsChild
IsWindowVisible
DispatchMessageA
GetActiveWindow
DrawTextA
DrawFrameControl
EnumThreadWindows
KillTimer
GetKeyboardType
UpdateWindow
EnableScrollBar
CharNextW
gdi32
CreateCompatibleDC
SelectPalette
LineTo
CopyEnhMetaFileA
BitBlt
SaveDC
SetBkColor
CreateCompatibleBitmap
GetDCOrgEx
CreatePalette
version
VerQueryValueA
VerInstallFileA
VerFindFileA
kernel32
ExitProcess
SizeofResource
MoveFileA
ResetEvent
ExitThread
GetLastError
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetACP
WaitForSingleObject
GetProcAddress
HeapDestroy
GetFileType
RaiseException
GetThreadLocale
comctl32
ImageList_Add
ImageList_Remove
ImageList_Draw
oleaut32
SysStringLen
SafeArrayCreate
SafeArrayGetElement
VariantCopyInd
SafeArrayUnaccessData
VariantChangeType
OleLoadPicture
shell32
SHGetDesktopFolder
DragQueryFileA
SHFileOperationA
Shell_NotifyIconA
Sections
CODE Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 223KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ