Static task
static1
Behavioral task
behavioral1
Sample
b4485fcc433a8f7986cc1423f9ddaa320b07aa4d78a2d2fca540e1232a61a189.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b4485fcc433a8f7986cc1423f9ddaa320b07aa4d78a2d2fca540e1232a61a189.exe
Resource
win10v2004-20220812-en
General
-
Target
b4485fcc433a8f7986cc1423f9ddaa320b07aa4d78a2d2fca540e1232a61a189
-
Size
104KB
-
MD5
0a533c83f92472b2ddd8bb808f408314
-
SHA1
64c9699c9f0923e1ff8e720e2a9fc3262d7bd10d
-
SHA256
b4485fcc433a8f7986cc1423f9ddaa320b07aa4d78a2d2fca540e1232a61a189
-
SHA512
f4f511f0e70c1a9f691420bf8d6af0c98f89aeb933326bab48b0ea59cbbb57e5c2094350c354749dda9688cf6074f286b5f9275bd97bb38aad09a2f0183c17e9
-
SSDEEP
1536:sM9AFCDcq/CQ5p7HkEN3PGOy/lgdl9eAmLqegTOcXjGIlWLC3:9mcDp5l3uOy/q9YkTOcXjxlJ3
Malware Config
Signatures
Files
-
b4485fcc433a8f7986cc1423f9ddaa320b07aa4d78a2d2fca540e1232a61a189.exe windows x86
268bb47ce84ddf6b9a9d62aac7da522d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetFilePointer
FlushFileBuffers
GetFileAttributesW
RtlUnwind
HeapFree
GetCommandLineA
GetVersionExA
RaiseException
HeapSize
HeapReAlloc
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
GetExitCodeProcess
CreateProcessW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetStdHandle
GlobalFlags
lstrcmpW
lstrcmpiW
GetProcessVersion
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
GetProcAddress
GetCurrentThreadId
GetVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
GetModuleFileNameW
lstrcpynW
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
lstrlenW
InterlockedDecrement
InterlockedIncrement
CreateEventW
CreateMutexW
CreateThread
SetEvent
Sleep
WaitForSingleObject
ReleaseMutex
CreateFileW
DeviceIoControl
CloseHandle
GetLastError
FormatMessageW
LocalFree
HeapAlloc
user32
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageW
LoadIconW
SetWindowTextW
LoadCursorW
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameW
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutW
DrawTextW
GrayStringW
GetTopWindow
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextW
GetDlgCtrlID
DestroyWindow
CreateWindowExW
SetPropW
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyState
CallNextHookEx
PeekMessageW
SetWindowsHookExW
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
SendMessageW
MessageBoxW
UnregisterDeviceNotification
RegisterDeviceNotificationW
LoadStringW
UnhookWindowsHookEx
EnableWindow
DispatchMessageW
advapi32
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegisterEventSourceW
ReportEventW
DeregisterEventSource
drvifnt
?MXOScanForDevices@@YAHAAHPAUMXO_DEV_INFO_STRUCT@@@Z
comctl32
ord17
gdi32
GetStockObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetClipBox
SelectObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
SetTextColor
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetObjectW
CreateBitmap
SetBkColor
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ