Static task
static1
Behavioral task
behavioral1
Sample
474807a4b244c6347982d4d2f4f715679a25bc90134f49347e22cce2d47ae2ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
474807a4b244c6347982d4d2f4f715679a25bc90134f49347e22cce2d47ae2ad.exe
Resource
win10v2004-20220812-en
General
-
Target
474807a4b244c6347982d4d2f4f715679a25bc90134f49347e22cce2d47ae2ad
-
Size
294KB
-
MD5
605a674548fe48867d0bee837bb66067
-
SHA1
cb9a415a7454aa8b9661de4acacb010795408f94
-
SHA256
474807a4b244c6347982d4d2f4f715679a25bc90134f49347e22cce2d47ae2ad
-
SHA512
2b94825ee91b9d83649c0ce6faff779d917584b9f75d7baa664e4ec8129326b075117f2cebcbc5dac9b2dd2bfd3982e9024c09a3eb249f5a24064d221fcd755e
-
SSDEEP
6144:vOg4RuQNCNt3DHgONiwN+9/0v+7lAx4fUga7Lt88G:Gt3NCPTAOIwA9/44V5aU
Malware Config
Signatures
Files
-
474807a4b244c6347982d4d2f4f715679a25bc90134f49347e22cce2d47ae2ad.exe windows x86
7d37fe5634fd8c235bc05dddb39c04fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadImageA
LoadIconA
TrackPopupMenu
GetScrollPos
SetRect
RemoveMenu
CallWindowProcA
EndPaint
SetWindowContextHelpId
GetWindowLongA
RegisterClassA
EndDeferWindowPos
IsChild
GetSubMenu
GetParent
DeferWindowPos
DestroyWindow
SetWindowPos
CopyAcceleratorTableA
SendMessageA
BeginPaint
SetCursor
WindowFromPoint
DrawFocusRect
ShowWindow
DefWindowProcA
BeginDeferWindowPos
GetMenuItemID
FillRect
GetKeyState
DrawIconEx
DrawIcon
GetClassLongA
GetClassNameA
HideCaret
GetNextDlgGroupItem
MessageBoxA
DispatchMessageA
GetSystemMetrics
PostQuitMessage
RegisterClassExA
DestroyIcon
CreateWindowExA
DrawTextA
GetPropA
SetPropA
SetRectEmpty
GetWindowTextA
GetDlgItemInt
kernel32
SetFilePointer
SetErrorMode
SetHandleCount
MultiByteToWideChar
GetStartupInfoA
TlsAlloc
HeapAlloc
CompareStringA
IsDebuggerPresent
GetStringTypeW
LCMapStringA
ReadFile
FlushFileBuffers
FindResourceA
QueryPerformanceCounter
GetCurrentProcess
lstrcpynW
CopyFileW
TlsFree
GlobalDeleteAtom
SetLastError
VirtualFree
GetFileTime
InterlockedExchange
WriteConsoleA
GlobalAddAtomA
GetCurrentProcessId
LockResource
HeapReAlloc
GetThreadLocale
CreateMutexA
GetTimeZoneInformation
GlobalAlloc
EnumSystemLocalesA
GetLastError
HeapCreate
DeleteCriticalSection
GetLocaleInfoA
ExitProcess
RaiseException
IsValidCodePage
GetProcAddress
GetDriveTypeA
GetTickCount
GetSystemTime
RtlUnwind
InterlockedIncrement
FatalAppExitA
TlsSetValue
OutputDebugStringA
GetProcessHeap
LoadLibraryA
MapViewOfFile
SetEnvironmentVariableA
TerminateProcess
HeapFree
SetStdHandle
lstrlenA
GetEnvironmentStrings
ResumeThread
GetSystemTimeAsFileTime
GlobalSize
InterlockedDecrement
MoveFileA
SizeofResource
GetModuleFileNameA
VirtualAlloc
CreateProcessA
CreateFileA
lstrcmpiA
UnhandledExceptionFilter
CloseHandle
GetVolumeInformationA
FreeEnvironmentStringsA
GetCurrentThread
SuspendThread
GetCPInfo
HeapDestroy
WideCharToMultiByte
WriteFile
IsValidLocale
LCMapStringW
GetModuleHandleA
GetUserDefaultLCID
FreeEnvironmentStringsW
HeapSize
GetModuleFileNameW
CompareStringW
IsDBCSLeadByte
DeleteFileA
GetOEMCP
GetLocaleInfoW
lstrcpynA
GlobalLock
GetPrivateProfileStringA
SystemTimeToFileTime
InitializeCriticalSection
FindNextFileA
IsBadWritePtr
GetLocalTime
lstrcmpA
GetACP
FreeLibrary
VirtualQuery
FindFirstFileW
lstrcpyA
UnlockFile
GetEnvironmentStringsW
SetConsoleCtrlHandler
LockFile
GetTimeFormatA
GetFileSize
TlsGetValue
GetCurrentThreadId
GetVersionExA
GetCurrentDirectoryA
GetSystemInfo
GetStdHandle
GetFileType
LeaveCriticalSection
GetStringTypeA
EnterCriticalSection
GetCommandLineA
LocalFree
GetVersion
shell32
SHGetSpecialFolderLocation
DragQueryFileA
ord155
SHGetPathFromIDListA
comctl32
ImageList_GetIcon
ImageList_DragShowNolock
ImageList_Read
ImageList_Write
ImageList_EndDrag
ImageList_DragMove
ord17
ole32
StgCreateDocfileOnILockBytes
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
ReleaseStgMedium
CreateILockBytesOnHGlobal
StgOpenStorage
StringFromGUID2
CoTaskMemAlloc
CoGetClassObject
OleDuplicateData
CLSIDFromString
CLSIDFromProgID
advapi32
RegQueryValueA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCloseKey
version
VerQueryValueA
GetFileVersionInfoA
gdi32
GetFontData
GetPolyFillMode
FloodFill
GetBitmapBits
SetPaletteEntries
ExtSelectClipRgn
GetBitmapDimensionEx
GetBkMode
SetViewportOrgEx
Polygon
CloseFigure
ExtFloodFill
GetArcDirection
ScaleWindowExtEx
SetStretchBltMode
GetPaletteEntries
CreateDIBitmap
CreatePenIndirect
GetClipRgn
StretchBlt
SetWindowOrgEx
CreateEnhMetaFileA
GetCurrentPositionEx
InvertRgn
GetClipBox
CloseEnhMetaFile
CloseMetaFile
FillPath
PolyBezierTo
PlayMetaFile
RoundRect
SetMapMode
Pie
SelectClipPath
SetRectRgn
GetGlyphOutlineA
ExtTextOutA
SetTextCharacterExtra
StartPage
DPtoLP
SetPixel
StretchDIBits
RectVisible
PolyBezier
Ellipse
GetStockObject
CreateHalftonePalette
GetDCOrgEx
GetTextAlign
CreateICA
GetTextMetricsA
CreateRoundRectRgn
FrameRgn
PaintRgn
GetCharABCWidthsA
GetMapMode
PatBlt
DeleteMetaFile
Escape
SetPolyFillMode
GetPixel
CreateRectRgnIndirect
ScaleViewportExtEx
LPtoDP
SetTextAlign
PtInRegion
GetViewportOrgEx
StrokePath
UpdateColors
GetStretchBltMode
TextOutA
OffsetClipRgn
GetViewportExtEx
CombineRgn
SetTextColor
GetCharWidthA
GetNearestColor
CreateFontA
Rectangle
StartDocA
CreatePatternBrush
ExcludeClipRect
SetBitmapBits
GetWindowExtEx
SelectPalette
CreatePolygonRgn
CreateMetaFileA
SetWindowExtEx
CreateFontIndirectA
SetBrushOrgEx
GetRgnBox
GetCurrentObject
SelectClipRgn
EndPage
EndDoc
SetBitmapDimensionEx
RealizePalette
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ