Static task
static1
Behavioral task
behavioral1
Sample
4d740094ea3609bd8cf8337b50c24113b7af9bc07a34abac89bfd43a4969a385.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d740094ea3609bd8cf8337b50c24113b7af9bc07a34abac89bfd43a4969a385.exe
Resource
win10v2004-20220901-en
General
-
Target
4d740094ea3609bd8cf8337b50c24113b7af9bc07a34abac89bfd43a4969a385
-
Size
122KB
-
MD5
80c30522358d5240b3b03a939449f9c6
-
SHA1
c9efcda5dc2e72fde5b6df5a142f90e1d717701e
-
SHA256
4d740094ea3609bd8cf8337b50c24113b7af9bc07a34abac89bfd43a4969a385
-
SHA512
0df59873b7e6c0093aede68a1414ac72df2174f2532e24053cdddb6c00e2fa02dac5d4093820954de43472514e585614075cdab4a4a59f250d89768eedc353fa
-
SSDEEP
1536:+WNfVNgtcjr72iIT0vlSYb7ZBlWeCalYLakhOqlI45vZcWPXOISiDLJ/bJN:7CtcjXpBZlYLu8I45vZcWPFSw/b3
Malware Config
Signatures
Files
-
4d740094ea3609bd8cf8337b50c24113b7af9bc07a34abac89bfd43a4969a385.exe windows x86
a392b7738292a41d58a58faea05e1093
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetLastError
InitializeCriticalSection
MultiByteToWideChar
LoadLibraryExW
lstrcmpiW
CloseHandle
GetExitCodeProcess
CreateProcessW
GetTickCount
CreateEventW
GetUserDefaultLangID
GetProcAddress
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameW
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
RtlUnwind
ExitProcess
Sleep
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
FlushInstructionCache
FreeLibrary
DeleteCriticalSection
GetCurrentThreadId
InterlockedExchange
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
RaiseException
SetLastError
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryW
QueryPerformanceCounter
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
user32
ExitWindowsEx
MessageBoxW
GetActiveWindow
DefWindowProcW
DialogBoxParamW
DestroyWindow
SetWindowLongW
KillTimer
SetTimer
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
SetWindowPos
SendMessageW
EndDialog
GetWindowLongW
UnregisterClassW
InvalidateRect
LoadImageW
GetMessageW
LoadCursorW
RegisterClassExW
GetSystemMetrics
CreateWindowExW
ShowWindow
UpdateWindow
BeginPaint
GetClientRect
EndPaint
EnumWindows
RealGetWindowClassW
GetWindowTextW
MsgWaitForMultipleObjects
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
CharNextW
UnregisterClassA
gdi32
DeleteObject
GetObjectW
GetStockObject
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
advapi32
RegEnumKeyExW
RegDeleteValueW
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoUninitialize
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE