Static task
static1
Behavioral task
behavioral1
Sample
f4108862393df4fc4e6050110a851de13932bbb581e14c9d54ada813f55fc1ce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4108862393df4fc4e6050110a851de13932bbb581e14c9d54ada813f55fc1ce.exe
Resource
win10v2004-20220901-en
General
-
Target
f4108862393df4fc4e6050110a851de13932bbb581e14c9d54ada813f55fc1ce
-
Size
288KB
-
MD5
7c83f09890fdee19ade8a0ab361e4730
-
SHA1
7f936e70823978a2e1585f3d8d64f0292682a91b
-
SHA256
f4108862393df4fc4e6050110a851de13932bbb581e14c9d54ada813f55fc1ce
-
SHA512
506c2e5ad7d5361b7c54af56c91a1d68c6a289078a0af754bca1ce1538f354bd2f3fc0d4978202a553877344ca69f2e522cb5c537951fa8b562afc8fc023806b
-
SSDEEP
6144:HgRlylY45aVnDY+kuqZF/9hsuYxfG2wnFVTE2QSosz51Tkbxgcn0+pP5YSF6pJ1f:ArF4YnsPuo/96fG2wnFVTE2QSosz51T0
Malware Config
Signatures
Files
-
f4108862393df4fc4e6050110a851de13932bbb581e14c9d54ada813f55fc1ce.exe windows x86
379f810ab72c1d37422c767b0f7a8be6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
ClosePrinter
GetPrinterA
GetJobA
OpenPrinterA
DocumentPropertiesA
ord204
gdi32
DeleteObject
DeleteEnhMetaFile
SetAbortProc
CreateDCW
Rectangle
GetPixel
GetObjectW
DeleteDC
CreateDIBSection
GetRegionData
BitBlt
GetDeviceCaps
CreateEllipticRgn
PtInRegion
SetPixel
CreateSolidBrush
CreatePen
SetBkColor
CreateRectRgn
ole32
CoRegisterClassObject
CreateBindCtx
CLSIDFromProgID
CoGetClassObject
OleIsCurrentClipboard
GetHGlobalFromILockBytes
OleInitialize
OleCreateStaticFromData
CreateStreamOnHGlobal
kernel32
FileTimeToLocalFileTime
CreateProcessA
HeapSize
SetStdHandle
HeapFree
CreateFileA
CompareFileTime
HeapReAlloc
LocalAlloc
HeapAlloc
CreateDirectoryW
GlobalFree
GlobalFlags
ReadFile
DeleteCriticalSection
lstrcpynA
GlobalHandle
GetStdHandle
VirtualAlloc
GetCurrentProcess
SetErrorMode
FormatMessageW
GlobalMemoryStatus
Sleep
GetACP
TerminateProcess
CreateMutexA
GlobalSize
HeapCreate
GetSystemInfo
FreeResource
WriteConsoleA
LoadLibraryA
FreeEnvironmentStringsA
GetTempPathW
GetFileAttributesA
FindFirstFileA
lstrcmpA
lstrlenW
LocalFree
lstrcmpW
SetLastError
FindNextFileA
SetFilePointer
GetTickCount
MulDiv
GetSystemDirectoryA
UnlockFile
HeapDestroy
GetModuleFileNameW
GetCPInfo
lstrcmpiA
SetHandleCount
TlsGetValue
GetLocaleInfoW
SetEvent
CopyFileW
CreateFileW
ConvertDefaultLocale
FindNextFileW
FileTimeToSystemTime
GetModuleFileNameA
TlsSetValue
FatalAppExitA
GetVersionExW
InterlockedExchange
IsValidCodePage
GetConsoleOutputCP
SetFileTime
GetTempFileNameA
UnmapViewOfFile
GetFileTime
lstrcpyA
VirtualProtect
GetThreadLocale
GetTimeFormatA
DuplicateHandle
LocalFileTimeToFileTime
GlobalReAlloc
GetConsoleMode
WideCharToMultiByte
InterlockedCompareExchange
GetConsoleCP
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentProcessId
ExitProcess
CreateDirectoryA
GetStartupInfoW
GetVersion
FindFirstFileW
GlobalDeleteAtom
GetLastError
GetProcessHeap
LocalReAlloc
GetExitCodeProcess
TlsAlloc
DeleteFileA
GetCurrentDirectoryA
IsBadWritePtr
CompareStringW
ExitThread
GetModuleHandleW
GetLocaleInfoA
LockResource
GetCurrentThread
GetLocalTime
ResumeThread
GetCurrentThreadId
lstrcpynW
GetUserDefaultLCID
RaiseException
IsDebuggerPresent
InitializeCriticalSection
QueryPerformanceCounter
WriteFile
GetStringTypeA
GetProcAddress
MoveFileW
SetEndOfFile
FindClose
GlobalLock
WaitForSingleObject
VirtualFree
MapViewOfFile
IsValidLocale
GetModuleHandleA
GetVersionExA
CloseHandle
WriteConsoleW
GetCommandLineA
InterlockedDecrement
lstrcpyW
UnhandledExceptionFilter
LCMapStringW
GlobalAlloc
LCMapStringA
SetEnvironmentVariableA
CreateMutexW
GetCommandLineW
EnterCriticalSection
RtlUnwind
SizeofResource
DeleteFileW
GetSystemTime
FreeEnvironmentStringsW
MultiByteToWideChar
CompareStringA
GetFileSize
GetFullPathNameA
lstrcmpiW
SetThreadPriority
GetDriveTypeA
lstrlenA
GetFileType
FreeLibrary
GetOEMCP
VirtualQuery
GetStartupInfoA
FormatMessageA
LeaveCriticalSection
GetStringTypeW
LockFile
TlsFree
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetTimeZoneInformation
CopyFileA
OutputDebugStringA
SuspendThread
LoadResource
GetFullPathNameW
CreateThread
GlobalUnlock
FlushFileBuffers
InterlockedIncrement
GetTempPathA
SetUnhandledExceptionFilter
user32
DestroyMenu
SetScrollInfo
ShowWindow
EnableWindow
GetFocus
DefMDIChildProcW
CheckDlgButton
DefWindowProcW
LoadMenuW
DestroyWindow
ScreenToClient
EndPaint
DrawTextW
GetWindowTextLengthW
RegisterClassW
SetMenuItemInfoW
EnableMenuItem
GetSysColorBrush
UnregisterClassW
EndDialog
SetMenu
GetCapture
GetClassLongW
GetClientRect
ScrollWindow
BeginPaint
SendMessageW
CreateWindowExW
SetCursor
KillTimer
CreateDialogParamW
GetSysColor
PtInRect
ChildWindowFromPoint
PeekMessageW
BringWindowToTop
RegisterClipboardFormatW
GetWindowRect
GetDC
IntersectRect
GetActiveWindow
SetScrollPos
DestroyCaret
InflateRect
LockWindowUpdate
TranslateMDISysAccel
TrackPopupMenu
CallWindowProcW
RegisterClassExW
EndDeferWindowPos
InvalidateRect
GetCursorPos
DialogBoxParamW
BeginDeferWindowPos
SetWindowTextW
GetMenuItemID
GetWindowTextW
GetMonitorInfoW
GetWindowLongW
WaitMessage
PostQuitMessage
MessageBeep
MessageBoxW
GetMenuItemCount
GetMenu
SetDlgItemInt
WindowFromPoint
GetMessageW
ReleaseDC
UpdateWindow
IsWindowEnabled
InsertMenuW
CloseClipboard
comctl32
ImageList_GetIconSize
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Draw
ImageList_GetImageInfo
winmm
waveInPrepareHeader
waveInReset
mmioAscend
waveOutReset
waveInAddBuffer
mixerSetControlDetails
timeGetTime
mixerOpen
PlaySoundA
mixerClose
waveInStart
waveInClose
waveInOpen
waveOutPause
waveInUnprepareHeader
oleaut32
LoadTypeLi
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ