Static task
static1
Behavioral task
behavioral1
Sample
4b3dfeda25aa18d88f78d7dc2498b2b1d30745da5ff258ffdca571e84246cf3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4b3dfeda25aa18d88f78d7dc2498b2b1d30745da5ff258ffdca571e84246cf3d.exe
Resource
win10v2004-20220812-en
General
-
Target
4b3dfeda25aa18d88f78d7dc2498b2b1d30745da5ff258ffdca571e84246cf3d
-
Size
138KB
-
MD5
59c23dcc033353645a9d70304d322900
-
SHA1
9f63708b962d91c305611b446c0a5461cc45f2be
-
SHA256
4b3dfeda25aa18d88f78d7dc2498b2b1d30745da5ff258ffdca571e84246cf3d
-
SHA512
4c045a4855558e701cf5e1c11925f5dc3c85fefb5eb1b858cb1a5c22c9a80dfe36d8764aca6de81c6833e39cf7adae508561b60f0f944beaf27b4e5dc186ddf8
-
SSDEEP
3072:1mvF6ZX9mtlJLiCZ9D4ZVfTmiuCCGb9H74M3u:SCX9mtlz0miue3
Malware Config
Signatures
Files
-
4b3dfeda25aa18d88f78d7dc2498b2b1d30745da5ff258ffdca571e84246cf3d.exe windows x86
e01bd170c02080486ae4ae2e41b0a8a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord151
gdi32
GetStretchBltMode
GetTextExtentPoint32W
PolyPolyline
MoveToEx
IntersectClipRect
CreateRectRgnIndirect
OffsetRgn
StretchBlt
GetDIBColorTable
CreateRoundRectRgn
StretchDIBits
CreatePenIndirect
OffsetViewportOrgEx
GetTextMetricsW
GetPixel
GdiFlush
LineTo
SetMapMode
ScaleViewportExtEx
CreateCompatibleBitmap
SetWindowExtEx
GetTextExtentPointA
GetBitmapBits
SetBkMode
GetWindowExtEx
SetStretchBltMode
ExtTextOutW
RectVisible
GetTextMetricsA
UnrealizeObject
CreatePatternBrush
ExtCreatePen
RealizePalette
SelectObject
SetWindowOrgEx
DeleteDC
ExtTextOutA
PatBlt
CombineRgn
PolylineTo
RoundRect
Ellipse
CreateFontW
DPtoLP
GetTextColor
LPtoDP
SetTextAlign
BitBlt
CreateFontIndirectA
GetPaletteEntries
Polyline
Escape
CreateHalftonePalette
SetBkColor
GetDIBits
GetStockObject
CreateCompatibleDC
GetTextExtentPoint32A
GetObjectW
Rectangle
CreateDIBitmap
ExtSelectClipRgn
CreatePalette
SetViewportOrgEx
SetDIBColorTable
EndDoc
CreatePolygonRgn
GetCurrentPositionEx
CreateFontIndirectW
SetPixelV
GetObjectA
GetDCOrgEx
GetClipBox
CreateBrushIndirect
EndPage
CreatePen
CreateDIBSection
GetRgnBox
SaveDC
GetWindowOrgEx
PtVisible
SelectClipRgn
RestoreDC
shlwapi
PathGetCharTypeW
kernel32
GetOEMCP
CompareStringW
CompareStringA
GetTimeZoneInformation
GetCurrentProcessId
GetTickCount
GetEnvironmentStrings
GetModuleHandleW
lstrcmpA
VirtualAlloc
SizeofResource
FindClose
InterlockedExchange
SetEnvironmentVariableA
WaitForSingleObject
EnterCriticalSection
MultiByteToWideChar
CreateFileA
LoadResource
FreeLibraryAndExitThread
LoadLibraryA
GetCommandLineW
LeaveCriticalSection
ReadFile
GlobalAlloc
GetSystemInfo
HeapAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
HeapCreate
SetEndOfFile
WideCharToMultiByte
WaitForSingleObjectEx
WriteFile
LCMapStringW
HeapDestroy
GetModuleHandleA
GetStringTypeW
DeleteCriticalSection
CreateEventW
GetEnvironmentStringsW
ExitProcess
TryEnterCriticalSection
GetStartupInfoA
InterlockedCompareExchange
lstrlenW
TlsFree
LocalFree
SetStdHandle
FindFirstFileW
FreeLibrary
SetFilePointer
FreeEnvironmentStringsW
GetFileAttributesW
LoadLibraryExW
HeapSize
lstrlenA
SetHandleCount
LocalAlloc
FormatMessageW
LoadLibraryW
HeapFree
GetModuleFileNameA
SetFilePointerEx
GetVersionExW
GetVersionExA
IsDebuggerPresent
GetCommandLineA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetStdHandle
FreeEnvironmentStringsA
GetLastError
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
GetCPInfo
GetACP
Sleep
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ