Static task
static1
Behavioral task
behavioral1
Sample
47d20d4f62cd99a8dadf4b7327a5ed21fd931709eab2813bcfe46ee70c57ba3b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
47d20d4f62cd99a8dadf4b7327a5ed21fd931709eab2813bcfe46ee70c57ba3b.exe
Resource
win10v2004-20220901-en
General
-
Target
47d20d4f62cd99a8dadf4b7327a5ed21fd931709eab2813bcfe46ee70c57ba3b
-
Size
285KB
-
MD5
c6584b231a93795cdaa586b4a4d34b7c
-
SHA1
8eb2ac276bc9a02d0b53ae50f1137f109c04ae57
-
SHA256
47d20d4f62cd99a8dadf4b7327a5ed21fd931709eab2813bcfe46ee70c57ba3b
-
SHA512
0d5b754c616cfff496a8473312c0b9317b5cbf47710403636ac916543bb8539cbd064acea2d9872ebcb6b786b25c5b94d811bd2d783783d221d3600ed480ad80
-
SSDEEP
3072:upMplxcgED0mOEOLjVqpBgPJ7yMByaMnemL3Lq31tJzjsiuiCG7Su2OqkvgdDx4g:5BDOpBU7y9aoTwBsizCOoH1Knvr+3
Malware Config
Signatures
Files
-
47d20d4f62cd99a8dadf4b7327a5ed21fd931709eab2813bcfe46ee70c57ba3b.exe windows x86
a4cc06e8263f770fe6ff9218e9cc2a83
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSysColor
ToAsciiEx
LoadBitmapW
DestroyMenu
UnregisterClassW
LoadCursorW
GetSysColorBrush
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CopyImage
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
CharUpperW
GetWindowTextW
GetFocus
GetParent
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
SetWindowLongW
GetDlgCtrlID
GetWindowLongW
IsDialogMessageW
SendDlgItemMessageW
GetWindow
PostQuitMessage
GetMenuState
GetMenuItemCount
FindWindowW
SetWindowTextW
GetDlgItem
EnableWindow
IsWindow
DrawIcon
GetClientRect
IsIconic
SendMessageW
LoadIconW
GetSystemMetrics
MessageBoxW
PostMessageW
GetSubMenu
PeekMessageW
InvertRect
GetMessageTime
SendMessageTimeoutW
GetAsyncKeyState
GetWindowLongA
GetClassInfoA
GetNextDlgTabItem
GetMenuItemID
CallWindowProcA
EnableScrollBar
NotifyWinEvent
shell32
SHGetPathFromIDListA
CommandLineToArgvW
ole32
CoTaskMemFree
CoRegisterMessageFilter
advapi32
RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegEnumValueA
gdi32
SetMapMode
GetKerningPairsA
CreatePolygonRgn
SetBoundsRect
GetCharABCWidthsI
DeleteMetaFile
SetWindowOrgEx
PatBlt
Pie
GetMetaFileBitsEx
kernel32
GetCurrentDirectoryW
GlobalFlags
lstrlenA
SetErrorMode
GetFileSizeEx
GetFileTime
GetStartupInfoW
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
ExitProcess
SetEnvironmentVariableW
SetCurrentDirectoryW
RtlUnwind
RaiseException
HeapReAlloc
ExitThread
SetStdHandle
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
TlsSetValue
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetTickCount
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetCurrentDirectoryA
GetDriveTypeA
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
WritePrivateProfileStringW
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GetModuleHandleA
FreeResource
GetCurrentProcessId
GlobalAddAtomW
SuspendThread
ResumeThread
SetThreadPriority
GetFullPathNameW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
LoadLibraryW
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
lstrcmpW
FreeLibrary
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleW
GetProcAddress
lstrlenW
GetVolumeInformationW
TlsFree
DeleteCriticalSection
LocalReAlloc
GetCommandLineA
FreeEnvironmentStringsA
GetEnvironmentStrings
InterlockedIncrement
InterlockedDecrement
TlsAlloc
SetFileAttributesA
ReplaceFileA
GetCurrentThread
GetProcessHeap
TransmitCommChar
PurgeComm
FileTimeToDosDateTime
CreateDirectoryA
CreateEventA
GetEnvironmentStringsW
BeginUpdateResourceW
GetLocalTime
GetThreadContext
CompareStringW
FindResourceW
GetTempFileNameW
GetVersionExW
VirtualProtect
GetFileType
GetSystemDirectoryA
DebugActiveProcessStop
lstrcpynA
GetDateFormatA
ReleaseMutex
CopyFileW
EnumResourceNamesW
VirtualProtectEx
IsBadWritePtr
SetHandleCount
CreateFileA
GetFileSize
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetLastError
CloseHandle
GetFileAttributesW
SizeofResource
LockResource
LoadResource
MultiByteToWideChar
FormatMessageW
LocalFree
GetCommandLineW
DeleteFileW
GetTempPathW
GetEnvironmentVariableW
GlobalMemoryStatusEx
CreateEventW
ResetEvent
WaitForSingleObject
Sleep
SetEvent
GetPrivateProfileStringW
CreateDirectoryW
CreateProcessW
GetExitCodeProcess
SetFileAttributesW
RemoveDirectoryW
VirtualFree
VirtualAlloc
MoveFileW
SetFileTime
CreateThread
WideCharToMultiByte
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ