Static task
static1
Behavioral task
behavioral1
Sample
a4df4769c546f569b464428ec66908e4b7634ceec9cd118e50b2e30f391a3515.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4df4769c546f569b464428ec66908e4b7634ceec9cd118e50b2e30f391a3515.exe
Resource
win10v2004-20220901-en
General
-
Target
a4df4769c546f569b464428ec66908e4b7634ceec9cd118e50b2e30f391a3515
-
Size
824KB
-
MD5
8099c967768f88197b0897f0e11297a0
-
SHA1
400f8ec627485bbfdcf0a88b70852e68926c41bf
-
SHA256
a4df4769c546f569b464428ec66908e4b7634ceec9cd118e50b2e30f391a3515
-
SHA512
1458214c41254aee1ab52aab775a15c415a7bcb48813906d438c37e3b02d720fb19f57e978a5aa4fc8ae94819997bde7c7ab59fdf6cb7ec605d6dfb3bc05310b
-
SSDEEP
12288:v1rKBeeKVW+ZIH99g+TqFCAqifLPxRbVYX8VRH++MyTNQRmqSePU07yhitGBaGoJ:9KBMWiy7OFP1Tu8fe+MyxQRm10Q67
Malware Config
Signatures
Files
-
a4df4769c546f569b464428ec66908e4b7634ceec9cd118e50b2e30f391a3515.exe windows x86
1be6fe2a48a866b117cc4b4dad9a1702
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_DragEnter
CreateMappedBitmap
kernel32
GetCommandLineA
FreeLibrary
HeapReAlloc
IsValidCodePage
WaitForMultipleObjectsEx
EnumResourceNamesA
GetModuleFileNameW
GetModuleFileNameA
RtlUnwind
WriteConsoleA
GetSystemTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetTimeZoneInformation
SetEnvironmentVariableA
GetDateFormatA
GetSystemDirectoryW
ReadFile
FindResourceA
GetCurrentProcessId
GetMailslotInfo
lstrcmpiA
GetStringTypeW
CreateNamedPipeA
GetProcAddress
GetEnvironmentStringsW
IsDebuggerPresent
WriteConsoleW
GetThreadPriorityBoost
GetModuleHandleA
FillConsoleOutputCharacterA
CloseHandle
WritePrivateProfileStringW
WriteConsoleOutputA
TerminateProcess
WritePrivateProfileSectionA
GetLastError
GetCurrentProcess
DeleteAtom
GetStartupInfoW
FlushFileBuffers
GetShortPathNameA
FindNextFileW
GetTickCount
FindResourceW
FreeEnvironmentStringsW
SetHandleCount
ConnectNamedPipe
InitializeCriticalSectionAndSpinCount
VirtualQuery
TlsAlloc
GetTimeFormatW
GetPrivateProfileIntA
MultiByteToWideChar
InterlockedIncrement
GetCPInfo
IsValidLocale
TlsFree
GetStdHandle
InterlockedDecrement
SetConsoleCtrlHandler
GetStartupInfoA
DeleteCriticalSection
VirtualUnlock
WaitForMultipleObjects
VirtualAlloc
HeapFree
TerminateThread
GetFileType
UnhandledExceptionFilter
GetLocaleInfoW
SetFilePointer
LocalFree
GetTimeFormatA
GetEnvironmentStrings
GetDriveTypeW
WaitCommEvent
HeapDestroy
GetOEMCP
SetConsoleMode
LCMapStringW
CreateMutexA
GetPrivateProfileSectionNamesA
GetStringTypeA
SetLastError
LeaveCriticalSection
GetModuleHandleW
GetFullPathNameA
GlobalAddAtomA
OpenMutexA
FreeEnvironmentStringsA
HeapSize
FillConsoleOutputAttribute
LocalAlloc
GetACP
GetNamedPipeHandleStateW
TlsGetValue
GetVolumeInformationA
EnumCalendarInfoA
ExitProcess
OutputDebugStringA
InterlockedExchange
FlushInstructionCache
DeleteFileW
HeapCreate
VirtualFree
Sleep
GetConsoleMode
OpenProcess
TlsSetValue
WriteFile
GetLocaleInfoA
GetTempPathA
HeapAlloc
CreateDirectoryExW
WideCharToMultiByte
EnumSystemLocalesA
GetCurrentThread
GetProfileSectionA
SetUnhandledExceptionFilter
VirtualProtect
GetUserDefaultLCID
CompareStringA
SetStdHandle
SetCurrentDirectoryW
CreateToolhelp32Snapshot
EnumCalendarInfoW
LocalSize
GetFileSize
GetCurrentThreadId
GetFileAttributesExA
GlobalFindAtomA
SetConsoleTitleA
LoadLibraryA
ReadConsoleW
GetCommandLineW
CreateWaitableTimerW
EnterCriticalSection
SetEndOfFile
lstrcmpiW
CompareStringW
LCMapStringA
GetConsoleOutputCP
FindFirstFileExW
GetConsoleCP
CreateFileA
user32
GetMenuStringA
GetKeyboardLayoutNameW
WINNLSGetEnableStatus
CreateWindowStationW
GetGuiResources
SetScrollPos
SendDlgItemMessageA
RegisterClassExA
IsZoomed
InSendMessage
GetParent
DialogBoxParamW
DdeFreeDataHandle
VkKeyScanA
RegisterClassA
CheckDlgButton
IsCharUpperW
GetDlgItemInt
CharToOemBuffA
DefDlgProcA
CreateIconFromResource
EnumPropsA
SetMenuItemInfoA
SendMessageW
GetShellWindow
GetClassInfoExA
CallMsgFilterW
OemToCharBuffA
GetDlgItemTextW
CharToOemA
GetDCEx
GetWindow
DlgDirListComboBoxW
UnpackDDElParam
DlgDirSelectComboBoxExA
Sections
.text Size: 228KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 408KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ