Static task
static1
Behavioral task
behavioral1
Sample
4c505a71906506f69b5b3a5469e61e048e8e3c51b590f0a7f02dbbde95db2b30.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c505a71906506f69b5b3a5469e61e048e8e3c51b590f0a7f02dbbde95db2b30.exe
Resource
win10v2004-20220812-en
General
-
Target
4c505a71906506f69b5b3a5469e61e048e8e3c51b590f0a7f02dbbde95db2b30
-
Size
183KB
-
MD5
0ad13a1b221d577fc7dd9f8b322b547e
-
SHA1
eec967fad958d0536feed108a8e9aebff3f58e20
-
SHA256
4c505a71906506f69b5b3a5469e61e048e8e3c51b590f0a7f02dbbde95db2b30
-
SHA512
24010b25154f542ed28035255fddef49c947467ea127511ed6d506f293853550f29b355ef5035a811c11f6b18f354498dae4130752566a39d8fc71a2a7f35310
-
SSDEEP
3072:RnxVN5+p45b60W28r+MoatKl7x6aSnaxDPa:RzN5+c60WRoag6aSaDPa
Malware Config
Signatures
Files
-
4c505a71906506f69b5b3a5469e61e048e8e3c51b590f0a7f02dbbde95db2b30.exe windows x86
413ae65a4bd9142522d373c0f35daa28
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowLongA
ReleaseDC
SetWindowLongA
DefWindowProcA
PostQuitMessage
InvalidateRect
GetDC
EndPaint
LoadStringA
MessageBoxA
ExitWindowsEx
PostThreadMessageA
LoadImageA
AdjustWindowRectEx
GetDesktopWindow
GetWindowRect
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
BeginPaint
IsRectEmpty
ChangeMenuA
MessageBoxExA
DdeCmpStringHandles
GetUserObjectInformationA
DdePostAdvise
DrawCaption
SendMessageW
CreateWindowExA
CreateAcceleratorTableW
GetDlgCtrlID
OpenIcon
CreateMDIWindowW
DrawTextExW
SetWindowTextA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueA
gdi32
UnrealizeObject
DeleteObject
DeleteDC
CreateCompatibleDC
SelectPalette
GetObjectA
CreateDCW
AddFontResourceW
RealizePalette
CreateDIBSection
CreateDIBPatternBrush
CreateColorSpaceA
ColorCorrectPalette
Chord
AddFontMemResourceEx
CreateBrushIndirect
ArcTo
AngleArc
SelectObject
BitBlt
AddFontResourceExW
CreatePalette
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
IsValidCodePage
InterlockedDecrement
InterlockedIncrement
Sleep
GetModuleHandleW
GetSystemTimeAsFileTime
SetCurrentDirectoryA
DeleteCriticalSection
InitializeCriticalSection
GetTimeZoneInformation
GetTickCount
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
RaiseException
HeapSize
GetConsoleCP
GetConsoleMode
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
TlsFree
FreeEnvironmentStringsA
GetPrivateProfileSectionNamesA
QueryPerformanceCounter
DnsHostnameToComputerNameW
SetFileApisToANSI
LocalFileTimeToFileTime
SetCalendarInfoW
SetEvent
SetHandleCount
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
GetEnvironmentStringsW
TlsAlloc
FreeEnvironmentStringsW
UnhandledExceptionFilter
HeapFree
SetLastError
WideCharToMultiByte
GetEnvironmentStrings
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
GetFileAttributesA
GetLastError
CloseHandle
CreateThread
GetModuleFileNameA
FreeLibrary
TlsGetValue
LeaveCriticalSection
GetSystemDirectoryA
GetProcAddress
EnterCriticalSection
GetModuleHandleA
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ