Static task
static1
Behavioral task
behavioral1
Sample
4e6ac02f9f9f1c8f032485fa40bc6b83b29e1577cb9b82bed5c2cd2df671f9d1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4e6ac02f9f9f1c8f032485fa40bc6b83b29e1577cb9b82bed5c2cd2df671f9d1.exe
Resource
win10v2004-20220901-en
General
-
Target
4e6ac02f9f9f1c8f032485fa40bc6b83b29e1577cb9b82bed5c2cd2df671f9d1
-
Size
801KB
-
MD5
80a716b8253dd362196bada1d5619426
-
SHA1
92ebf93901a9e5b4496e7108d8d67005bea7c716
-
SHA256
4e6ac02f9f9f1c8f032485fa40bc6b83b29e1577cb9b82bed5c2cd2df671f9d1
-
SHA512
888dae821c1a1c4b53b3b51a5678b6e872ecf49c8f2e7ab9c1731784d11790ace69130f3c2081fc6e9d8e63df30fef036f535e223bde9d2244993d979a52d7dc
-
SSDEEP
6144:swFs/WVJgTcRxItmqM3yWGvuuFdyBvZJfPhQeewQeePQeesQee/+QeefQeecUYAd:M4RxomqIyWGvuZBvjiAqpT7hBeaJQY
Malware Config
Signatures
Files
-
4e6ac02f9f9f1c8f032485fa40bc6b83b29e1577cb9b82bed5c2cd2df671f9d1.exe windows x86
a2374b13b5ecb5ec4d81d3212967e0e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
user32
SetWindowTextW
CreateDialogParamW
EnableWindow
ShowWindow
GetAsyncKeyState
IsWindowVisible
wsprintfW
GetDlgItem
GetForegroundWindow
GetWindow
GetWindowInfo
UnregisterHotKey
SetWindowPos
LoadImageW
GetDC
ReleaseDC
RegisterHotKey
LoadAcceleratorsW
PeekMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
LoadStringW
FindWindowW
PostMessageW
GetMonitorInfoW
DestroyWindow
PostQuitMessage
GetCursorPos
SendMessageW
DefWindowProcW
MessageBoxW
EnumDisplaySettingsW
gdi32
CreateDIBSection
CreateDCW
GetObjectW
GetDIBits
DeleteObject
DeleteDC
GetStockObject
GetDeviceCaps
ExtEscape
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyA
kernel32
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeW
GetConsoleCP
LCMapStringW
LCMapStringA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetConsoleMode
RaiseException
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
WriteConsoleW
FlushFileBuffers
IsProcessorFeaturePresent
GetStringTypeA
GetUserDefaultLangID
QueryPerformanceCounter
QueryPerformanceFrequency
lstrcatW
lstrcmpiW
lstrcpynW
lstrcpyW
lstrlenW
FreeLibrary
GetProcAddress
lstrcmpW
Sleep
GetVersionExW
LoadLibraryW
ReleaseMutex
MultiByteToWideChar
GetLastError
CreateMutexW
ReadFile
SetFilePointer
CloseHandle
CreateFileW
GlobalFree
GlobalAlloc
GetTickCount
GetModuleHandleW
VirtualQuery
WaitForSingleObject
ResetEvent
CreateThread
CreateEventW
LoadLibraryA
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
Sections
.text Size: 391KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sgpdf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 86KB - Virtual size: 86KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE