Static task
static1
Behavioral task
behavioral1
Sample
547b7ae26ac3bf2b236a95ab68e8f6100b39fa8f7065f82352787ca6aa3dfcdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
547b7ae26ac3bf2b236a95ab68e8f6100b39fa8f7065f82352787ca6aa3dfcdf.exe
Resource
win10v2004-20220812-en
General
-
Target
547b7ae26ac3bf2b236a95ab68e8f6100b39fa8f7065f82352787ca6aa3dfcdf
-
Size
475KB
-
MD5
0c47322a67512af7a209f3a77d8e1e90
-
SHA1
fac26a1b69a932ef87cc191629dc2727428c163e
-
SHA256
547b7ae26ac3bf2b236a95ab68e8f6100b39fa8f7065f82352787ca6aa3dfcdf
-
SHA512
46a6963e408cb1a3edd96bb6d8c0bf62d748e53b8a1ba234077f424e445526ad73e1869c5ae2c719bc49f725aa04121d46b816892d2937f0559196486e614ab9
-
SSDEEP
12288:YAq7Ng859GkLVFfGhEyhk8fCMTt6vTOL:yNDG2pyLfb5cT
Malware Config
Signatures
Files
-
547b7ae26ac3bf2b236a95ab68e8f6100b39fa8f7065f82352787ca6aa3dfcdf.exe windows x86
66b9587defe2a620f3342503225babe4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GlobalFree
GlobalUnlock
GlobalSize
GlobalAlloc
LocalFree
LocalAlloc
MultiByteToWideChar
GetPrivateProfileStringW
GetPrivateProfileIntW
FreeLibrary
GetComputerNameW
lstrlenW
LocalUnlock
LocalLock
GlobalDeleteAtom
GlobalAddAtomW
GetStartupInfoA
GetLastError
SetUnhandledExceptionFilter
GetModuleHandleA
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
lstrcmpiW
DisableThreadLibraryCalls
WriteFile
WideCharToMultiByte
WaitForSingleObject
ReleaseSemaphore
SystemTimeToFileTime
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetCurrentProcess
DosDateTimeToFileTime
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetTempPathA
FormatMessageW
FormatMessageA
GetSystemDirectoryW
user32
EnableMenuItem
GetMenu
SetFocus
CallWindowProcW
CreateWindowExW
GetWindowLongW
LoadIconW
GetSystemMetrics
GetSysColor
WinHelpW
DdeClientTransaction
DdePostAdvise
SetWindowPos
DdeCmpStringHandles
DdeCreateStringHandleW
SetTimer
FlashWindow
GetDC
ReleaseDC
InvalidateRect
OpenClipboard
GetClipboardData
DdeCreateDataHandle
DdeAddData
GetSystemMenu
DdeGetData
MoveWindow
FindWindowW
AppendMenuW
UpdateWindow
SetWindowPlacement
RegisterClipboardFormatW
DdeGetLastError
DdeNameService
DrawIcon
DdeKeepStringHandle
GetDesktopWindow
DdeDisconnect
CharUpperW
DdeAbandonTransaction
RegisterClassW
LoadCursorW
wsprintfW
AdjustWindowRectEx
GetCursor
IsCharUpperA
SetWindowTextA
DefWindowProcW
winspool.drv
AddPrinterW
GetPrinterW
EnumPrintersW
OpenPrinterW
EnumJobsW
ClosePrinter
GetJobW
comdlg32
ChooseFontW
ChooseColorW
advapi32
QueryServiceConfigW
CreateServiceW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
UnlockServiceDatabase
GetSidIdentifierAuthority
LookupAccountNameW
RegQueryValueExW
RegCloseKey
RegConnectRegistryW
GetLengthSid
GetSidSubAuthority
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
ole32
CreatePointerMoniker
StringFromGUID2
IIDFromString
StringFromCLSID
msvcrt
wcschr
wcscmp
free
wcsrchr
swscanf
wcslen
exit
malloc
wcscat
wcscpy
comctl32
CreateToolbarEx
shlwapi
PathFindFileNameW
winmm
sndPlaySoundW
waveOutGetNumDevs
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 380KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ