Static task
static1
Behavioral task
behavioral1
Sample
4a4b575de9b97ad2ab5fcf1d91739782f5558d94367f335ab1d04931718ad591.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a4b575de9b97ad2ab5fcf1d91739782f5558d94367f335ab1d04931718ad591.exe
Resource
win10v2004-20220812-en
General
-
Target
4a4b575de9b97ad2ab5fcf1d91739782f5558d94367f335ab1d04931718ad591
-
Size
164KB
-
MD5
7b58be551790f5487c85b9bbd7eeed50
-
SHA1
ea465a910d8c9353191815df1b0bce88f08edf3e
-
SHA256
4a4b575de9b97ad2ab5fcf1d91739782f5558d94367f335ab1d04931718ad591
-
SHA512
6bfc9dd6e6c2efa4a83691286eec72aa15d9a1ac6dafd8b3b3280f8d0ee89b3e8a9752a9d5b0a2a065e32b795fe4c7593231fac3fca3f105e7acae2b8f32263b
-
SSDEEP
3072:tjRr5qDCowsZLiNyRkACaGAsRlTyfTF/3edAhw:P8/wsaE5GdTGTF6AO
Malware Config
Signatures
Files
-
4a4b575de9b97ad2ab5fcf1d91739782f5558d94367f335ab1d04931718ad591.exe windows x86
40c13ce01923d7fc5b803ac594e9bbad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
CompareStringA
SetEndOfFile
SizeofResource
DeleteCriticalSection
FreeLibrary
FormatMessageW
SetStdHandle
HeapDestroy
GetVersionExW
TlsFree
EnterCriticalSection
HeapSize
ReadFile
lstrlenA
GetFileAttributesW
MultiByteToWideChar
LocalFree
InterlockedExchange
GetOEMCP
GetStringTypeW
GetEnvironmentStringsW
HeapCreate
InitializeCriticalSection
WideCharToMultiByte
CreateFileA
LoadResource
GlobalAlloc
GetModuleHandleA
lstrlenW
GetModuleFileNameA
GetCommandLineW
FindFirstFileW
SetHandleCount
LoadLibraryA
FreeLibraryAndExitThread
LCMapStringW
HeapFree
WriteFile
LeaveCriticalSection
FindClose
WaitForSingleObject
GlobalFree
ExitProcess
VirtualAlloc
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
GetCurrentThreadId
GetCurrentProcess
GetStartupInfoW
GetStartupInfoA
CompareFileTime
CompareStringW
GetTimeZoneInformation
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetLocaleInfoA
RtlUnwind
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetProcAddress
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
GetCPInfo
GetACP
Sleep
SetEnvironmentVariableA
user32
GetSystemMetrics
gdi32
RestoreDC
SetBrushOrgEx
SetTextAlign
RealizePalette
DPtoLP
CreateDCA
SelectPalette
Ellipse
Polyline
CreateFontW
CreateBrushIndirect
GetTextExtentPointA
MoveToEx
SetPixel
SetPixelV
GetDCOrgEx
GetWindowOrgEx
CreateRectRgnIndirect
ExtEscape
SaveDC
GetDeviceCaps
ExtSelectClipRgn
ExtTextOutW
CreateBitmap
GetPaletteEntries
CreatePalette
SetMapMode
CreatePen
CreatePenIndirect
UnrealizeObject
CreateDIBitmap
ExtCreatePen
DeleteDC
CreateSolidBrush
GetDIBColorTable
GetViewportExtEx
ScaleWindowExtEx
EndDoc
SetDIBColorTable
DeleteObject
BitBlt
SelectObject
GetTextMetricsA
CreateHalftonePalette
Rectangle
SetBkMode
ExtTextOutA
GetBitmapBits
RectVisible
GetTextExtentPoint32W
GetPixel
GetStockObject
SetViewportExtEx
GetMapMode
ole32
StgCreateDocfileOnILockBytes
CreateBindCtx
CLSIDFromProgID
CLSIDFromString
OleRun
OleInitialize
CoQueryProxyBlanket
CoTaskMemFree
msi
ord46
shell32
SHGetIconOverlayIndexA
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ