Static task
static1
Behavioral task
behavioral1
Sample
4e89a22928c0aff5898464e0895cd28bee5a1d14a950923a4311492847f87079.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e89a22928c0aff5898464e0895cd28bee5a1d14a950923a4311492847f87079.exe
Resource
win10v2004-20220901-en
General
-
Target
4e89a22928c0aff5898464e0895cd28bee5a1d14a950923a4311492847f87079
-
Size
160KB
-
MD5
5ccfca35a995dcae23b62c14980d7e4a
-
SHA1
17b906b60a4676ffb5c285f6ea616b5d43b2eaa9
-
SHA256
4e89a22928c0aff5898464e0895cd28bee5a1d14a950923a4311492847f87079
-
SHA512
7492a31c6fd428b0e49616b49195e85c57e72c0600cf295c3b59c7b59243a06310b28dc5619856ba260d0b9242dafc100e1aa9b2f9b676476a05dc0b1e5d2e6c
-
SSDEEP
3072:rPTi2tvB1KUZRXUaOG2+kP12svD4X580IKA3LMiMX580Ir:fJvD8zG3kI5X5rIKZiMX5rIr
Malware Config
Signatures
Files
-
4e89a22928c0aff5898464e0895cd28bee5a1d14a950923a4311492847f87079.exe windows x86
69a3141bc60edaa3a67cac1dae17cc78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WaitForInputIdle
TabbedTextOutA
GetWindowTextA
wsprintfA
GetCursorPos
GetWindowDC
SetCapture
DrawIcon
DeleteMenu
DrawTextW
ScrollDC
SetWindowLongA
AppendMenuW
PostMessageW
EnumWindows
RegisterClassW
GetClassWord
comdlg32
GetOpenFileNameW
shell32
SHGetPathFromIDListW
SHGetFolderPathA
SHGetPathFromIDListA
ole32
OleDestroyMenuDescriptor
CoLockObjectExternal
gdi32
TextOutW
SetStretchBltMode
Arc
SelectObject
CreateFontA
LineTo
GdiFlush
SetBkMode
EnumMetaFile
GetNearestColor
SelectClipRgn
FlattenPath
SetTextAlign
GetTextColor
SetDeviceGammaRamp
RestoreDC
FrameRgn
kernel32
VirtualFree
WriteConsoleA
InterlockedDecrement
InterlockedIncrement
GetEnvironmentStrings
GetModuleFileNameA
GetConsoleOutputCP
SetFilePointer
VirtualAlloc
LCMapStringA
GetStringTypeA
GetLocaleInfoA
CreateFileA
CompareStringA
InitializeCriticalSectionAndSpinCount
CreateNamedPipeW
GetThreadPriority
RtlCaptureStackBackTrace
GetFileAttributesExW
LocalAlloc
LocalFileTimeToFileTime
HeapCreate
LoadLibraryA
GetFileInformationByHandle
GetDriveTypeW
FindFirstFileA
EncodePointer
GetCurrentDirectoryA
HeapSetInformation
DebugSetProcessKillOnExit
CreateDirectoryW
HeapReAlloc
GetPrivateProfileStringA
GetCurrentProcessId
SystemTimeToFileTime
FormatMessageA
UpdateResourceW
LCMapStringW
GetFullPathNameW
FreeEnvironmentStringsA
GetEnvironmentVariableA
WinExec
CopyFileW
lstrcmpiW
SetEndOfFile
WriteConsoleW
FlushFileBuffers
ReadConsoleW
SetEnvironmentVariableA
GetConsoleMode
GetConsoleCP
CompareStringW
GetStringTypeW
OutputDebugStringW
SetStdHandle
HeapAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
RtlUnwind
HeapSize
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
WriteFile
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetStdHandle
GetProcessHeap
GetModuleHandleExW
ExitProcess
GetCurrentThreadId
SetLastError
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
DecodePointer
GetCommandLineW
GetLastError
RaiseException
IsDebuggerPresent
CloseHandle
CreateFileW
ReadFile
SetFilePointerEx
LoadLibraryExW
ExpandEnvironmentStringsW
DeleteFileW
QueryPerformanceFrequency
LoadLibraryExA
GetModuleHandleA
VirtualAllocEx
VirtualProtectEx
GetProcAddress
GetTempPathW
FlushInstructionCache
MultiByteToWideChar
GetModuleFileNameW
VerifyVersionInfoA
GetFileAttributesW
LoadLibraryW
WideCharToMultiByte
GetTickCount
GetModuleHandleW
SetEnvironmentVariableW
GetCurrentProcess
VerSetConditionMask
SetDllDirectoryW
FreeLibrary
GetProcessIoCounters
GetEnvironmentVariableW
GetCommandLineA
GetStartupInfoA
SetHandleCount
GetTimeZoneInformation
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ