Static task
static1
Behavioral task
behavioral1
Sample
2412cde4789a974fef72f8ce366064ead58ea426d828c96e558d80944313ef40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2412cde4789a974fef72f8ce366064ead58ea426d828c96e558d80944313ef40.exe
Resource
win10v2004-20220812-en
General
-
Target
2412cde4789a974fef72f8ce366064ead58ea426d828c96e558d80944313ef40
-
Size
670KB
-
MD5
48bccc9ce171286f1bfb70958ffb5b30
-
SHA1
6ef2aea13173432df6fb4ef059a9038e7aa89c2d
-
SHA256
2412cde4789a974fef72f8ce366064ead58ea426d828c96e558d80944313ef40
-
SHA512
f471a287fa549867708a2ccd51a73ca71ca43e841ae186b3d4a9536bb1009f9ff7779ae5761bdbaf54f6b0d433428b272149fa16020be6d01779172bc3102b07
-
SSDEEP
12288:taKj2XFh9WvoLZq4WBnPMQ9Xe24CNxn/uvNiOPDZQWDUWm:N2XF3ZRWBnPMQ9x4w/uvNiOPtQWfm
Malware Config
Signatures
Files
-
2412cde4789a974fef72f8ce366064ead58ea426d828c96e558d80944313ef40.exe windows x86
ed227323fbe15c50d8d37db68c82d782
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSysColor
PostMessageA
SystemParametersInfoA
IsWindowVisible
RegisterClassA
DestroyMenu
PostQuitMessage
LoadBitmapA
SetWindowPos
IsWindow
GetDC
SendMessageA
GetClientRect
ScreenToClient
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
PeekMessageA
TranslateMessage
IsWindowEnabled
GetWindow
LoadStringA
InvalidateRect
GetSubMenu
CreateWindowExA
FillRect
DispatchMessageA
EndPaint
SetFocus
BeginPaint
DefWindowProcA
GetSystemMetrics
GetWindowRect
SetCapture
ReleaseCapture
SetWindowLongA
EndDialog
SetWindowTextA
SetTimer
GetDlgItem
SetCursor
ClientToScreen
GetDesktopWindow
SetForegroundWindow
SetDlgItemTextA
MessageBoxA
advapi32
RegDeleteKeyW
RegCloseKey
oleaut32
SysFreeString
VariantClear
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
kernel32
FileTimeToSystemTime
CreateFileMappingA
GetFileAttributesA
WaitForSingleObject
FindFirstFileW
HeapDestroy
HeapFree
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleMode
GetLocaleInfoA
LocalAlloc
CreateFileA
SetErrorMode
FreeEnvironmentStringsW
SetStdHandle
WideCharToMultiByte
GetConsoleOutputCP
GetStringTypeA
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetFileAttributesA
SetEvent
LocalFree
FormatMessageW
GetExitCodeProcess
InitializeCriticalSection
LoadResource
FindClose
TlsGetValue
FormatMessageA
SetLastError
GetSystemTime
InterlockedDecrement
GetModuleFileNameW
VirtualProtect
IsDebuggerPresent
GetVersionExA
GetModuleFileNameA
GetStdHandle
lstrcmpiA
UnhandledExceptionFilter
MultiByteToWideChar
GetLocalTime
CreateMutexA
SetFilePointer
CreateThread
SetUnhandledExceptionFilter
MulDiv
GetCurrentThreadId
GetCurrentThread
GetVersion
GetLastError
GetCommandLineA
GetModuleHandleA
GetTickCount
GetCurrentProcessId
ExitProcess
HeapAlloc
GetProcessHeap
CompareStringA
GetOEMCP
VirtualAlloc
FindResourceA
Sleep
VirtualFree
WriteFile
HeapCreate
GetEnvironmentStrings
InterlockedExchange
GetModuleHandleW
GlobalLock
GetACP
lstrcpynA
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
SizeofResource
FileTimeToLocalFileTime
lstrlenW
GlobalAlloc
GetEnvironmentStringsW
GetThreadLocale
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
RemoveDirectoryA
WaitForMultipleObjects
FindNextFileA
ResetEvent
lstrcpyA
FindNextFileW
CompareStringW
GetProcAddress
DeleteFileW
GetEnvironmentVariableA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
WriteConsoleW
InterlockedIncrement
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
gdi32
GetStockObject
DeleteObject
Sections
.text Size: 620KB - Virtual size: 946KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ