Static task
static1
Behavioral task
behavioral1
Sample
4e8aab3255daae2c75e5995a97030e857bdaba10b6dc3b2b76376ba67cef802f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e8aab3255daae2c75e5995a97030e857bdaba10b6dc3b2b76376ba67cef802f.exe
Resource
win10v2004-20220812-en
General
-
Target
4e8aab3255daae2c75e5995a97030e857bdaba10b6dc3b2b76376ba67cef802f
-
Size
508KB
-
MD5
0e08e055e159e8fcc04e2b7b949d80d0
-
SHA1
0edc0e8ecfc1a45c6de05f3baf43bfb9a50371dd
-
SHA256
4e8aab3255daae2c75e5995a97030e857bdaba10b6dc3b2b76376ba67cef802f
-
SHA512
f15b3ac7b5f889fc9dcc4552c0a98685fe9b067df07cc6972211c3ffbf88f9bf33ce96307b3b6c097116b82ea872d5669a51d36b8b4d97dccdec7568dbaefe04
-
SSDEEP
6144:55C2fjKeMyqbyP6hhD675uUMdgEdrxA5FPCLSj570hG:rCsKaqbyP6veFuUM+EzA5F9JT
Malware Config
Signatures
Files
-
4e8aab3255daae2c75e5995a97030e857bdaba10b6dc3b2b76376ba67cef802f.exe windows x86
d3def229023fd3bdb25ecf5e3ffb5ab4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetProcessWindowStation
EndMenu
GetSysColor
GetScrollBarInfo
TrackPopupMenuEx
EndDeferWindowPos
GetWindowLongW
IsCharLowerA
GetSystemMetrics
IsZoomed
GetWindow
InSendMessage
DefFrameProcA
UpdateLayeredWindow
GetMenuState
GetMenuItemID
gdi32
UpdateICMRegKeyA
RemoveFontResourceExA
SetColorAdjustment
SetMetaRgn
GetWorldTransform
GetPath
MoveToEx
PlayEnhMetaFile
GetCharWidthA
SetBitmapDimensionEx
GetICMProfileA
SetBkColor
GdiComment
GetPaletteEntries
CloseEnhMetaFile
CreatePolygonRgn
ExtTextOutA
GetEnhMetaFileBits
DeleteColorSpace
ExtSelectClipRgn
PolyBezier
SetDIBColorTable
SetTextCharacterExtra
kernel32
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetProcessId
GetTapeStatus
GetVersion
GetFileSize
HeapAlloc
FlushFileBuffers
GetProcessHeap
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ