Static task
static1
Behavioral task
behavioral1
Sample
4227f1b822725e186f224355a4e11efc33beeacc140d2de01a70375bcad888e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4227f1b822725e186f224355a4e11efc33beeacc140d2de01a70375bcad888e5.exe
Resource
win10v2004-20220901-en
General
-
Target
4227f1b822725e186f224355a4e11efc33beeacc140d2de01a70375bcad888e5
-
Size
312KB
-
MD5
8c8acc14234425071e9acdd88f3861cb
-
SHA1
d5c7d2eb4de5400c884e54593473755c553e97e6
-
SHA256
4227f1b822725e186f224355a4e11efc33beeacc140d2de01a70375bcad888e5
-
SHA512
d6e0e01369dec90531d6c7df138534e53b9ccf46567e768e37cb9a0b836fb149de172ad7b0bcb12a8298560678f808bd960eecf3db2f6dba4c41222fc8a36a6b
-
SSDEEP
1536:ualBC7l7ujYIGwgEyqnUJnPWrgS5wEpNofpg8glaN0mSvibzWSWOieidiliUJxQ6:qRy05SnUJOnpNohHQyc03i0Bxm6
Malware Config
Signatures
Files
-
4227f1b822725e186f224355a4e11efc33beeacc140d2de01a70375bcad888e5.exe windows x86
2f844c2f1735b3a2a5280942220228cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
SetStdHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
HeapFree
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
HeapAlloc
GetProcAddress
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
DeleteFileA
GetLastError
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
CloseHandle
FlushFileBuffers
GetModuleHandleA
WinExec
OpenFile
GetTempFileNameA
_lopen
_lread
_lclose
_lcreat
_llseek
_lwrite
GlobalAlloc
GlobalLock
GlobalUnlock
WideCharToMultiByte
GlobalFree
user32
LoadBitmapA
GetCursorPos
PtInRect
ReleaseCapture
ClientToScreen
SetCursorPos
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RegisterClassA
LoadCursorA
ShowWindow
CreateWindowExA
LoadMenuA
DestroyCursor
PostQuitMessage
MoveWindow
GetWindowRect
SetCapture
DefWindowProcA
DestroyWindow
InvalidateRect
WinHelpA
SendMessageA
SetClassLongA
EnableMenuItem
CreateDialogParamA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
PostMessageA
GetFocus
SetDlgItemTextA
DispatchMessageA
GetClientRect
GetMenu
GetMenuState
CheckMenuItem
DrawMenuBar
DialogBoxParamA
GetWindowLongA
MessageBoxA
EndDialog
SendDlgItemMessageA
GetDlgItemTextA
SetWindowTextA
GetDlgItem
TranslateMessage
SetFocus
ReleaseDC
GetDC
UpdateWindow
LoadStringA
gdi32
DeleteDC
SetROP2
CreatePen
SelectObject
MoveToEx
LineTo
DeleteObject
GetStockObject
BitBlt
DPtoLP
GetObjectA
SetMapMode
GetMapMode
CreateCompatibleDC
mapdsp60
ord9
ord8
ord4
ord36
ord5
ord6
ord7
ord32
ord34
ord39
ord38
ord40
bas60
ord237
ord16
ord7
ord226
ord230
ord5
ord415
ord416
ord12
ord221
ord164
ord222
ord175
ord188
ord13
ord14
ord15
ord32
ord18
ord820
ord1552
ord31
ord33
ord166
ord189
ord3
ord1551
ord4
ord280
w60oper
ord33
ord21
ord20
ord17
ord19
ord22
ord29
ord13
ord4
ord6
ord9
ord5
ord34
ord35
ord8
ord7
ord31
ord10
ord36
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE