Static task
static1
Behavioral task
behavioral1
Sample
4516c1ee57056ff2a84ea226be795e9afc768b78ddc602d9c2f4c5fd9f588f69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4516c1ee57056ff2a84ea226be795e9afc768b78ddc602d9c2f4c5fd9f588f69.exe
Resource
win10v2004-20220812-en
General
-
Target
4516c1ee57056ff2a84ea226be795e9afc768b78ddc602d9c2f4c5fd9f588f69
-
Size
276KB
-
MD5
a2788d6c16aef5fd86f6a6df988db030
-
SHA1
41e1ba940fb6b58e6871fdc10e0d74ca64474ad8
-
SHA256
4516c1ee57056ff2a84ea226be795e9afc768b78ddc602d9c2f4c5fd9f588f69
-
SHA512
370e7dde3533fa2a56ebf144dd9c676fdae9e3fb8441a166eca3c2a6fecfaad2fe27f4a9c5bd9d696ceffe8e9f176ce2e2ff9709cda339fd1cee1a2135450acc
-
SSDEEP
6144:cVh4y+OHCqAHp/O4OjiYQQm9XN+fU69e1akId4Ui:cVhJDMHpIjigGXN+fU69e1and4
Malware Config
Signatures
Files
-
4516c1ee57056ff2a84ea226be795e9afc768b78ddc602d9c2f4c5fd9f588f69.exe windows x86
0793604ffb05c2ef47efdbe9dae0462a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessagePos
UpdateWindow
GetClassNameW
GetDC
GetAsyncKeyState
EnumChildWindows
ShowWindow
GetWindowTextW
FindWindowW
GetMessageW
CloseClipboard
EndDialog
OffsetRect
SetCapture
LoadIconW
WindowFromPoint
BeginDeferWindowPos
DeferWindowPos
CreateMenu
UnregisterHotKey
GetPropW
TranslateMessage
RegisterWindowMessageW
msacm32
acmDriverAddW
acmDriverClose
acmStreamUnprepareHeader
acmStreamSize
acmStreamReset
acmStreamPrepareHeader
acmStreamOpen
acmStreamMessage
acmStreamConvert
acmStreamClose
acmMetrics
acmGetVersion
acmFormatTagEnumW
acmFormatTagDetailsW
acmFormatSuggest
acmFormatEnumW
acmFormatDetailsW
acmFormatChooseW
acmFilterTagEnumW
acmFilterTagDetailsW
acmDriverRemove
acmDriverPriority
acmDriverOpen
acmDriverMessage
acmDriverID
acmDriverEnum
acmDriverDetailsW
msvcr71
_except_handler3
_onexit
__dllonexit
gmtime
asctime
clock
localtime
time
calloc
free
malloc
_c_exit
_exit
_XcptFilter
_cexit
exit
_wcmdln
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
kernel32
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
LocalFree
LocalAlloc
GetStartupInfoW
GetModuleHandleA
VirtualProtect
SetTapeParameters
ExpandEnvironmentStringsW
SetFileAttributesW
CreateProcessW
DeleteCriticalSection
CreateFileW
SetEndOfFile
GetFileSize
CloseHandle
Sections
.text Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ