Static task
static1
Behavioral task
behavioral1
Sample
4dd6d38c6f62766414682091d410824bcca96a2ffb499b0ace5c0f468fc18146.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4dd6d38c6f62766414682091d410824bcca96a2ffb499b0ace5c0f468fc18146.exe
Resource
win10v2004-20220812-en
General
-
Target
4dd6d38c6f62766414682091d410824bcca96a2ffb499b0ace5c0f468fc18146
-
Size
152KB
-
MD5
710b35251daa6356ecb4475bd92f73e6
-
SHA1
f3d443a79e2ebc00e21f90816e738fb33a035984
-
SHA256
4dd6d38c6f62766414682091d410824bcca96a2ffb499b0ace5c0f468fc18146
-
SHA512
f75c67db79d91f61500afe1e6ff2000b8edbd9352070ed10ee166701c49da674ba45886c1b736929e997e9af0fa6714c2bc32efc895ff4cabff999514a753802
-
SSDEEP
3072:fIbF6YHLijJWR1e7rRf2saY+w5e0g6snUhUZDrsUj:wbjSJppabWgEsgi
Malware Config
Signatures
Files
-
4dd6d38c6f62766414682091d410824bcca96a2ffb499b0ace5c0f468fc18146.exe windows x86
f13702021e6c3bc18e223e2e034c0b65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
SetEnvironmentVariableA
EnterCriticalSection
FreeLibrary
WriteFile
ResetEvent
GetACP
WaitForMultipleObjects
CreateFileA
GetCommandLineW
LeaveCriticalSection
FindFirstFileW
InterlockedIncrement
DeleteCriticalSection
FileTimeToSystemTime
WideCharToMultiByte
SetHandleCount
HeapReAlloc
WaitForSingleObject
MultiByteToWideChar
InterlockedExchange
GetStdHandle
WaitForSingleObjectEx
GlobalAlloc
RaiseException
CreateThread
GetEnvironmentStrings
CompareStringA
GetSystemInfo
HeapFree
LocalFree
GetEnvironmentStringsW
GetModuleFileNameA
FormatMessageW
TlsSetValue
CreateFileW
TlsGetValue
CreateEventW
TryEnterCriticalSection
FreeLibraryAndExitThread
GetFileType
CloseHandle
InterlockedExchangeAdd
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
OutputDebugStringA
lstrlenW
SetEvent
CreateMutexW
VirtualAlloc
GetModuleHandleW
GetStartupInfoA
GetCurrentProcessId
CompareFileTime
GetCurrentProcess
GetModuleHandleA
GetStartupInfoW
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
GetCurrentThread
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetLastError
TlsAlloc
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetOEMCP
Sleep
RtlUnwind
HeapSize
GetLocaleInfoA
CompareStringW
user32
GetSystemMetrics
gdi32
DPtoLP
CombineRgn
RestoreDC
SetPixelV
CreateCompatibleBitmap
GetMapMode
RealizePalette
GetDeviceCaps
Escape
GetObjectA
GetTextColor
SetTextAlign
SetViewportExtEx
GetSystemPaletteEntries
CreateFontIndirectA
ExcludeClipRect
SetPixel
SetRectRgn
CreateBrushIndirect
BitBlt
GetBkColor
SetStretchBltMode
GetTextMetricsW
MoveToEx
GetClipBox
GetWindowExtEx
Polyline
CreateRectRgnIndirect
Ellipse
SetBrushOrgEx
CreateHalftonePalette
SetBkColor
GetStretchBltMode
IntersectClipRect
CreateFontA
CreateRoundRectRgn
GetStockObject
SetWindowExtEx
EndDoc
GetWindowOrgEx
SetViewportOrgEx
GetTextExtentPoint32A
ExtTextOutW
ScaleViewportExtEx
SetBkMode
CreatePatternBrush
CreateDIBitmap
ExtEscape
GetRgnBox
GetObjectW
GetDIBColorTable
DeleteObject
GetPaletteEntries
GetBitmapBits
RectVisible
CreateFontW
ExtTextOutA
GetDCOrgEx
ScaleWindowExtEx
SelectObject
CreateCompatibleDC
SelectPalette
SaveDC
SetMapMode
SetDIBColorTable
GetCurrentPositionEx
PolylineTo
RoundRect
CreatePalette
SetWindowOrgEx
CreateDCA
CreatePen
StretchDIBits
UnrealizeObject
PatBlt
GetDIBits
SetTextColor
GetTextExtentPointA
ExtSelectClipRgn
DeleteEnhMetaFile
GetTextExtentPoint32W
LPtoDP
CreateBitmap
DeleteDC
SelectClipRgn
CreatePolygonRgn
ole32
CoTaskMemFree
OleInitialize
OleGetClipboard
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc
msi
ord46
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ