Static task
static1
Behavioral task
behavioral1
Sample
4ecb9d4a49bc8ded0ff0193c8609abe6be7fd8b5737c8dce16cbf30d3b0ab029.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ecb9d4a49bc8ded0ff0193c8609abe6be7fd8b5737c8dce16cbf30d3b0ab029.exe
Resource
win10v2004-20220901-en
General
-
Target
4ecb9d4a49bc8ded0ff0193c8609abe6be7fd8b5737c8dce16cbf30d3b0ab029
-
Size
373KB
-
MD5
ffa64a66003688d18f81fe26c36eacb9
-
SHA1
0166103f2689aca38182d5ac3e6a7b3bc4ed246e
-
SHA256
4ecb9d4a49bc8ded0ff0193c8609abe6be7fd8b5737c8dce16cbf30d3b0ab029
-
SHA512
93f36be5bfab21f1bc2e8c9a646b3f846eb927e3d7dc88657a2839bb1f887dbf0ad458d724abbdfbebb9f4b8c0b22f4e797ac8e90621f2081fc7cdfa495ad0a2
-
SSDEEP
6144:Lf6TAG1I4nLGY+4R0spBVxEIhTLLFUiRD92QMmeSKibMNO4/q5id5lPwFlfT:LSTaeQ0h3VphTnFbZ9emecKqaaFVT
Malware Config
Signatures
Files
-
4ecb9d4a49bc8ded0ff0193c8609abe6be7fd8b5737c8dce16cbf30d3b0ab029.exe windows x86
a64aa8a4696947985a5da5bce4b71f7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowPos
SendMessageA
TranslateMessage
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
LoadStringA
CharNextA
DialogBoxParamA
IsCharAlphaA
CharNextExA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
GetWindowRect
SystemParametersInfoA
MessageBeep
PeekMessageA
GetSysColor
GetClassNameA
MessageBoxA
DispatchMessageA
MapWindowPoints
GetClientRect
CreateWindowExA
EnumChildWindows
DeferWindowPos
AdjustWindowRect
DestroyWindow
EndDeferWindowPos
AnyPopup
kernel32
SetHandleCount
SetEnvironmentVariableA
CompareStringW
RaiseException
HeapSize
SetFilePointer
GetConsoleCP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapReAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WriteFile
DeleteCriticalSection
GetTimeZoneInformation
ExitProcess
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
GetStartupInfoA
Sleep
GetConsoleScreenBufferInfo
GetStdHandle
VirtualAlloc
Beep
WriteConsoleOutputA
WriteConsoleOutputCharacterA
GetProfileStringW
LockFile
GetStartupInfoW
DeleteVolumeMountPointW
SetEnvironmentVariableW
CallNamedPipeA
UnlockFileEx
lstrcpyA
HeapAlloc
HeapFree
GetModuleHandleA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
CloseHandle
SetStdHandle
GetFileType
RtlUnwind
LCMapStringA
LCMapStringW
FlushFileBuffers
lstrcpynA
CompareStringA
FindResourceA
lstrlenA
FindClose
FindFirstFileA
GetDiskFreeSpaceA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetFileAttributesA
lstrcatA
MoveFileExA
GetShortPathNameA
GetPrivateProfileSectionA
WritePrivateProfileStringA
WritePrivateProfileSectionA
GetModuleFileNameA
ExitThread
GetLastError
ResumeThread
CreateThread
GetSystemTimeAsFileTime
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ