Static task
static1
Behavioral task
behavioral1
Sample
4ea50ac42c43a0b9e8f2d67eb5be257fbf08cc5546875db366f976b15b49a313.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ea50ac42c43a0b9e8f2d67eb5be257fbf08cc5546875db366f976b15b49a313.exe
Resource
win10v2004-20220901-en
General
-
Target
4ea50ac42c43a0b9e8f2d67eb5be257fbf08cc5546875db366f976b15b49a313
-
Size
258KB
-
MD5
96af250b14b49695f82b50734af29450
-
SHA1
ebcaf049becae64468bf3de050dc43316459bd89
-
SHA256
4ea50ac42c43a0b9e8f2d67eb5be257fbf08cc5546875db366f976b15b49a313
-
SHA512
60ee255c81438a930ca6b2a3c5af5de7d4bb5b9e97fb61c28dd4baf76acd6e2b7711ce8c539f3967ca581ba589eb34bef70f68250ef96ba18e7c4b5d1ed9b5a5
-
SSDEEP
3072:kdajUWuT2mYD5QdjmG2MnW5r4E1IlOoJ:kczQZmenWrh
Malware Config
Signatures
Files
-
4ea50ac42c43a0b9e8f2d67eb5be257fbf08cc5546875db366f976b15b49a313.exe windows x86
779500b36740bf1d7d52684f76f06e84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetVersion
GetSystemInfo
GetModuleHandleA
GetProcAddress
FreeConsole
LoadLibraryW
GetModuleFileNameA
GetShortPathNameW
WriteFile
FindCloseChangeNotification
GetVersionExW
GetLocalTime
CreateFileMappingW
lstrcpyA
GetModuleHandleW
user32
GetWindowTextLengthW
EnumWindows
InflateRect
SendDlgItemMessageW
GetMenu
GetWindowLongW
CheckMenuItem
DrawFrameControl
DefWindowProcW
GetIconInfo
DeleteMenu
SetMenuItemInfoW
DestroyWindow
LoadImageW
LoadCursorW
FindWindowExW
GetScrollPos
InvalidateRect
GetForegroundWindow
OffsetRect
SetWindowPlacement
RemovePropA
DrawIcon
CheckDlgButton
MsgWaitForMultipleObjects
DestroyMenu
GetDlgItem
GetParent
gdi32
CombineRgn
MoveToEx
CreateDIBitmap
CreateRectRgn
CreateRectRgnIndirect
OffsetRgn
SetBkColor
SelectObject
CreateBrushIndirect
SelectClipRgn
DeleteObject
CreateCompatibleDC
comdlg32
GetSaveFileNameW
shell32
ShellExecuteW
ExtractIconW
SHGetPathFromIDListW
ole32
CoTaskMemFree
OleInitialize
comctl32
ImageList_BeginDrag
version
GetFileVersionInfoW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 222KB - Virtual size: 422KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ