Static task
static1
Behavioral task
behavioral1
Sample
4ec0eccf636b1a33c8d735a6d76fe11c790ab12cc860bd0751bf6ca172e34f26.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ec0eccf636b1a33c8d735a6d76fe11c790ab12cc860bd0751bf6ca172e34f26.exe
Resource
win10v2004-20220901-en
General
-
Target
4ec0eccf636b1a33c8d735a6d76fe11c790ab12cc860bd0751bf6ca172e34f26
-
Size
124KB
-
MD5
a1fe3a7ff1ec997411b71212483eea33
-
SHA1
1b4c361d4ad0bd2fd02e44bbfd7ad4d99b5cf250
-
SHA256
4ec0eccf636b1a33c8d735a6d76fe11c790ab12cc860bd0751bf6ca172e34f26
-
SHA512
a4d71ab97ad4795f61c51ea11f7fb1cce3284de39b75de0ccbc00f25a585adb9ef0f857222c87bf38d025224b40d2c51b50e57cf352746bfec492379cb084859
-
SSDEEP
3072:25shDO2eWDvh/ss19ayRCoUwBUVkVr0YWkVD:TO2fvh/Vn/QkVr0YW
Malware Config
Signatures
Files
-
4ec0eccf636b1a33c8d735a6d76fe11c790ab12cc860bd0751bf6ca172e34f26.exe windows x86
7a44f64c37901ed102b3e17492c2dccb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
Sleep
GetStringTypeW
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
LoadLibraryW
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CompareStringW
SetEnvironmentVariableA
CloseHandle
WriteConsoleW
GetTickCount
GetLastError
GetProcessHeap
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
LeaveCriticalSection
EnterCriticalSection
GetTimeZoneInformation
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
HeapCreate
GetConsoleWindow
FormatMessageA
GetVersionExA
HeapAlloc
GetFileSize
GetEnvironmentStringsW
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileW
user32
EndPaint
LoadCursorA
CreateWindowExW
LoadBitmapW
PtInRect
UpdateWindow
GetWindowRect
CreateDialogIndirectParamA
GetLastActivePopup
AnyPopup
GetMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
SetTimer
GetWindowTextA
ShowWindow
GetClientRect
GetWindowLongA
LoadBitmapA
SendMessageA
SetMenu
BeginPaint
OpenClipboard
GetClipboardData
CloseClipboard
InvalidateRect
IsWindowVisible
LoadIconA
gdi32
BitBlt
DeleteDC
GetBoundsRect
MoveToEx
LineTo
SelectObject
SetTextColor
TextOutA
CreateBrushIndirect
SetBkColor
SetGraphicsMode
DeleteObject
CreateCompatibleBitmap
SetBkMode
CreateSolidBrush
GetObjectA
advapi32
RegEnumKeyExA
shell32
ExtractIconExA
SHGetFileInfoA
SHGetFolderLocation
ExtractIconA
ord155
oleaut32
SysAllocString
ws2_32
gethostbyname
htons
WSAStartup
WSACleanup
comctl32
ImageList_Create
GetMUILanguage
ImageList_LoadImageA
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_Add
InitCommonControlsEx
ImageList_Draw
gdiplus
GdiplusStartup
GdiplusShutdown
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ