Static task
static1
Behavioral task
behavioral1
Sample
4146103079c18929ef7d9807bd1b24064e678d80476fb1d7ece22335752134b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4146103079c18929ef7d9807bd1b24064e678d80476fb1d7ece22335752134b2.exe
Resource
win10v2004-20220901-en
General
-
Target
4146103079c18929ef7d9807bd1b24064e678d80476fb1d7ece22335752134b2
-
Size
1.1MB
-
MD5
219f8d811f777d3667ad9b13f51fd110
-
SHA1
d7a39f510c76b57eed8a9b09e8d2f5830ae18553
-
SHA256
4146103079c18929ef7d9807bd1b24064e678d80476fb1d7ece22335752134b2
-
SHA512
5f36ea86de025a3a5d79cb3016442b8e51703dc6f6ed09af26c027a07ce76c3f44090d1d7985ae5ec8464b8561870b417d1933cdfcf15c7dfd5ea210a34e80a4
-
SSDEEP
24576:PiHbcaO1thJMqDHvXnuZ+hP2YjhDNkHmG:6FithJMqLdjxNkj
Malware Config
Signatures
Files
-
4146103079c18929ef7d9807bd1b24064e678d80476fb1d7ece22335752134b2.exe windows x86
a271e0b5497b1261ffcf9b940f49d1e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord5
PropertySheetA
ord6
ord17
kernel32
LeaveCriticalSection
EnterCriticalSection
CreateFileA
_lcreat
_lopen
SetFilePointer
ReadFile
SetStdHandle
VirtualAlloc
VirtualFree
FlushFileBuffers
_lclose
DeleteCriticalSection
GetOEMCP
GetACP
GetModuleFileNameA
UnhandledExceptionFilter
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
GetVersion
GetCurrentProcess
InitializeCriticalSection
GlobalAlloc
GlobalLock
SetPriorityClass
_llseek
_lwrite
LoadLibraryA
LoadModule
FreeLibrary
GlobalReAlloc
SetErrorMode
GetProcAddress
FindResourceA
LocalAlloc
LocalFree
Sleep
LoadResource
LockResource
GetFileType
GlobalUnlock
GlobalFree
TlsGetValue
GetTempPathA
GetFileAttributesA
GetSystemDirectoryA
SetFileAttributesA
DeleteFileA
CreateProcessA
GetStdHandle
GetCPInfo
GetLastError
WriteFile
TlsAlloc
TlsSetValue
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
GetModuleHandleA
GetEnvironmentStrings
ExitProcess
winmm
timeGetTime
waveOutGetNumDevs
sndPlaySoundA
joySetCapture
joyReleaseCapture
timeKillEvent
timeEndPeriod
timeBeginPeriod
timeSetEvent
auxGetNumDevs
auxGetDevCapsA
auxGetVolume
auxSetVolume
mciSendCommandA
joyGetNumDevs
joyGetDevCapsA
joyGetPos
user32
LoadMenuA
LoadStringA
GetSystemMetrics
SetCapture
SetMenu
SetCursor
ReleaseCapture
GetDlgCtrlID
EndPaint
CheckRadioButton
GetDC
MessageBeep
DefWindowProcA
PostQuitMessage
DispatchMessageA
TranslateMessage
PeekMessageA
GetAsyncKeyState
GetKeyNameTextA
CallWindowProcA
BeginPaint
GetDlgItem
ScreenToClient
EndDialog
WinHelpA
DestroyMenu
EnableMenuItem
CheckMenuItem
SendMessageA
GetClientRect
CopyRect
PtInRect
DestroyWindow
ReleaseDC
FindWindowA
SetForegroundWindow
LoadCursorA
LoadIconA
RegisterClassA
CreateWindowExA
GetMenu
GetWindowRect
SetWindowPos
UpdateWindow
SystemParametersInfoA
CreateDialogParamA
ShowWindow
PostMessageA
MessageBoxA
SetTimer
KillTimer
AdjustWindowRect
DrawMenuBar
CheckDlgButton
DialogBoxParamA
GetFocus
SetWindowLongA
EnableWindow
IsDlgButtonChecked
ClientToScreen
GetWindowLongA
MoveWindow
LoadBitmapA
SendDlgItemMessageA
gdi32
SelectObject
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
GetStockObject
DeleteObject
SelectPalette
DeleteDC
GetObjectA
StretchBlt
BitBlt
CreateCompatibleBitmap
RealizePalette
SetDIBits
SetStretchBltMode
GetSystemPaletteEntries
CreatePalette
GetSystemPaletteUse
SetSystemPaletteUse
GetDeviceCaps
SetDIBColorTable
GdiFlush
AnimatePalette
TextOutA
SetBkMode
SetTextColor
advapi32
RegCloseKey
RegFlushKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
Sections
.text Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 18KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 161B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 419KB - Virtual size: 418KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 99KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ