Static task
static1
Behavioral task
behavioral1
Sample
4fdcfc2a1be2b4736dc259e93c136e9d44763bc6822b9e11de3c44f9af7b3b80.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4fdcfc2a1be2b4736dc259e93c136e9d44763bc6822b9e11de3c44f9af7b3b80.exe
Resource
win10v2004-20220901-en
General
-
Target
4fdcfc2a1be2b4736dc259e93c136e9d44763bc6822b9e11de3c44f9af7b3b80
-
Size
213KB
-
MD5
903d073388d180414b22bbf4f2bc5c65
-
SHA1
85f6b3f74b2faa502d730bc9e472622fd5a36298
-
SHA256
4fdcfc2a1be2b4736dc259e93c136e9d44763bc6822b9e11de3c44f9af7b3b80
-
SHA512
f5cf01485fc8d0e1c5c3814934ae69f3aada49d050e203c6be68cf22f977350df6639808096f9ff584756d91ea1662a63b3b5d2072644dff726a4a31aad82213
-
SSDEEP
3072:5wcSad5XyLiHNBUJWC5T1B3VnhEZdz/rAamzU1q+g8a1EFp9wHh6wGqi4BnluB:0aniLgBUZdO9rbOU4+Ja1E/kuB
Malware Config
Signatures
Files
-
4fdcfc2a1be2b4736dc259e93c136e9d44763bc6822b9e11de3c44f9af7b3b80.exe windows x86
a44bab2c669c49b4605a75feecaa2d97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegOpenKeyExW
RegOpenKeyW
RegSetValueExW
kernel32
CreateFiber
CreateFileW
ExitProcess
SetUnhandledExceptionFilter
SwitchToFiber
UnmapViewOfFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy
user32
AdjustWindowRectEx
CallWindowProcW
ClientToScreen
CloseClipboard
CreateDialogParamW
CreateIconIndirect
CreateWindowExW
DefWindowProcW
DrawFrameControl
EnableWindow
EndPaint
ExitWindowsEx
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetMenuStringW
GetMessagePos
GetMessageTime
GetMessageW
GetScrollInfo
GetSystemMetrics
GetUpdateRect
GetWindow
GetWindowTextW
IsWindow
LoadCursorW
MessageBoxW
OffsetRect
OpenClipboard
SetCursor
SetCursorPos
SetParent
SetWindowPos
ShowWindow
SystemParametersInfoW
TranslateAcceleratorW
TranslateMDISysAccel
UpdateWindow
VkKeyScanW
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 34KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ