Static task
static1
Behavioral task
behavioral1
Sample
f480346b74a234a5244d712b72caa0c4985cd0b59fa77b196670fac2d2e6ae10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f480346b74a234a5244d712b72caa0c4985cd0b59fa77b196670fac2d2e6ae10.exe
Resource
win10v2004-20220812-en
General
-
Target
f480346b74a234a5244d712b72caa0c4985cd0b59fa77b196670fac2d2e6ae10
-
Size
276KB
-
MD5
6cefc64f90a1e4ea5657fa8fe50b06c0
-
SHA1
a0c709c844e8892f783cef02bc32cc29bef325b3
-
SHA256
f480346b74a234a5244d712b72caa0c4985cd0b59fa77b196670fac2d2e6ae10
-
SHA512
cdbebfbbef4ce4b98a36f96ef17273b8671cb8e164e1122f337e90c8eb45b281ba303f48d99871632c246904c157655c97f6280221b8d64a76323f98574dcb3d
-
SSDEEP
6144:4X5N5W5OzTsLu1yfgq6IqOZ1ovF4upyKLnsZ39ze4Vny:4X5NkeKf02dusKLe5Rn
Malware Config
Signatures
Files
-
f480346b74a234a5244d712b72caa0c4985cd0b59fa77b196670fac2d2e6ae10.exe windows x86
4741f8e19fc9eaa9e1156d9a94301128
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
OpenSemaphoreA
IsDBCSLeadByteEx
CreateMutexW
Beep
lstrcpyA
CloseHandle
EnumSystemCodePagesA
GetComputerNameW
UnlockFileEx
_lopen
GetVersionExA
CreateFileMappingW
IsBadReadPtr
EnumCalendarInfoA
GetPrivateProfileSectionNamesW
CreateIoCompletionPort
SetEnvironmentVariableA
CreatePipe
GetLocaleInfoA
QueueUserAPC
CreateWaitableTimerA
GetStringTypeA
FreeConsole
FindFirstFileA
WinExec
WideCharToMultiByte
GetPrivateProfileIntA
GetCPInfoExA
WaitForMultipleObjectsEx
HeapLock
SetWaitableTimer
LeaveCriticalSection
LoadModule
GetCommTimeouts
GetSystemDirectoryA
VirtualProtect
CreateFileMappingA
WriteFileEx
CreateDirectoryExW
CreateFileW
OpenWaitableTimerW
GlobalUnlock
GetStartupInfoA
GetAtomNameA
LoadResource
ContinueDebugEvent
OpenEventW
GetTempFileNameA
EnumResourceTypesA
PeekConsoleInputW
WaitForMultipleObjects
SetCommTimeouts
InterlockedCompareExchange
RaiseException
FillConsoleOutputCharacterW
IsDBCSLeadByte
OpenFileMappingW
HeapSize
SetVolumeLabelW
GetLocaleInfoW
LoadLibraryW
SetEnvironmentVariableW
GlobalHandle
PeekConsoleInputA
GetProfileStringA
FindResourceW
GetFullPathNameW
_lclose
CallNamedPipeA
GetDriveTypeA
CommConfigDialogW
TransactNamedPipe
user32
GetScrollPos
TabbedTextOutA
GetLastActivePopup
RegisterClipboardFormatA
DefFrameProcW
FillRect
MapVirtualKeyW
EnumDesktopWindows
ChangeClipboardChain
GetUserObjectSecurity
AdjustWindowRect
MessageBoxIndirectA
CallWindowProcW
DrawStateW
GetClassLongW
LoadMenuA
GetClipboardViewer
MessageBoxExW
OpenDesktopA
DrawTextExA
UnhookWindowsHook
CreateDialogIndirectParamA
UnhookWindowsHookEx
IsIconic
EnumDisplaySettingsA
DestroyCaret
GetWindowTextLengthW
IsWindowVisible
SetWindowLongA
SendMessageCallbackW
GetScrollInfo
LoadMenuIndirectW
OpenClipboard
SetPropW
VkKeyScanExA
TranslateAcceleratorA
GrayStringA
GetKeyboardLayoutNameA
InvertRect
DefWindowProcW
GetKeyboardLayoutList
ScrollWindowEx
GetNextDlgTabItem
SetCaretPos
SetDlgItemTextW
GetWindowTextA
CloseWindowStation
EnumWindows
LoadBitmapW
RegisterClassW
OemToCharA
LoadImageW
GetDlgItem
WaitMessage
CountClipboardFormats
GetFocus
DrawCaption
gdi32
GetOutlineTextMetricsA
SetMetaFileBitsEx
CreateScalableFontResourceA
GetSystemPaletteUse
SetWindowExtEx
EnumFontFamiliesExW
GetRandomRgn
SetMapperFlags
GetCharWidth32W
GetICMProfileW
ExtSelectClipRgn
SetWindowOrgEx
SetWinMetaFileBits
ResetDCA
PolyBezierTo
CreatePalette
SetPolyFillMode
GetTextExtentPoint32W
GetCurrentObject
CreatePatternBrush
GetMetaFileW
SetDIBColorTable
CopyMetaFileA
Pie
GetTextExtentExPointA
DeleteDC
PolyTextOutA
EnumICMProfilesW
StartPage
RealizePalette
InvertRgn
GetPixel
CopyMetaFileW
ModifyWorldTransform
StretchDIBits
GetMetaFileBitsEx
CreateScalableFontResourceW
CreateColorSpaceA
Polyline
comdlg32
CommDlgExtendedError
FindTextW
advapi32
SetSecurityInfo
ObjectOpenAuditAlarmA
CryptSetProviderExW
GetNamedSecurityInfoA
CryptSetKeyParam
DeregisterEventSource
GetMultipleTrusteeW
ObjectDeleteAuditAlarmW
PrivilegedServiceAuditAlarmW
BuildTrusteeWithNameA
GetTrusteeTypeA
GetCurrentHwProfileA
EnumDependentServicesA
RegConnectRegistryA
LookupPrivilegeNameW
GetSecurityDescriptorOwner
RegQueryMultipleValuesW
DuplicateToken
SetServiceObjectSecurity
QueryServiceStatus
CryptVerifySignatureA
BuildExplicitAccessWithNameA
GetKernelObjectSecurity
AllocateAndInitializeSid
GetSecurityDescriptorControl
AddAccessDeniedAce
CryptReleaseContext
RegDeleteValueW
CloseServiceHandle
LogonUserA
CryptDuplicateHash
ImpersonateSelf
RegRestoreKeyA
RegQueryValueExW
shell32
SHEmptyRecycleBinA
DragQueryFileW
ExtractIconExA
DoEnvironmentSubstA
ExtractIconW
Shell_NotifyIconA
ExtractIconA
SHFileOperationA
SHInvokePrinterCommandA
ShellAboutW
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strlen
Sections
.text Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE