Static task
static1
Behavioral task
behavioral1
Sample
4f1531f5e531c53294b147b2c095164fc65381887e54af1ac4bc1e2132abf5dc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4f1531f5e531c53294b147b2c095164fc65381887e54af1ac4bc1e2132abf5dc.exe
Resource
win10v2004-20221111-en
General
-
Target
4f1531f5e531c53294b147b2c095164fc65381887e54af1ac4bc1e2132abf5dc
-
Size
857KB
-
MD5
c749c21f803c57c8bf49e238755a93f3
-
SHA1
334a9def55fff974476fcd38be831c935e9d5934
-
SHA256
4f1531f5e531c53294b147b2c095164fc65381887e54af1ac4bc1e2132abf5dc
-
SHA512
c1de881b485de37f0497594a2272103768db30f6ea5e5284c319f5e81c3f7fe86f6d437d16925d09de10bf6528fda5f6c64190375ddf932092e25480000b5320
-
SSDEEP
24576:af09nEigFFDjKhZFoGMQoWluSXlP7e3M:afgETDirporSy
Malware Config
Signatures
Files
-
4f1531f5e531c53294b147b2c095164fc65381887e54af1ac4bc1e2132abf5dc.exe windows x86
d917ad7b0502839bd8e6b78e724fec29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringW
SetEndOfFile
GetCommConfig
IsBadHugeWritePtr
WritePrivateProfileSectionW
GetDiskFreeSpaceA
UnhandledExceptionFilter
FreeEnvironmentStringsA
lstrcmpiA
WritePrivateProfileStructW
SetProcessShutdownParameters
GetExitCodeProcess
lstrcmpiW
SetVolumeLabelW
GetLocaleInfoA
EnumLanguageGroupLocalesA
DeleteVolumeMountPointA
IsProcessorFeaturePresent
SetMailslotInfo
FreeEnvironmentStringsW
GetVersionExA
GetPrivateProfileSectionA
GetSystemDefaultLangID
GetCurrentDirectoryW
CreateHardLinkW
GetTimeFormatA
InterlockedCompareExchange
SetEvent
GlobalAlloc
GetCurrencyFormatW
PurgeComm
SetLocaleInfoA
FindFirstVolumeW
FlushInstructionCache
WritePrivateProfileSectionA
SetPriorityClass
UnmapViewOfFile
OutputDebugStringA
GetStringTypeA
FindCloseChangeNotification
GetLocaleInfoW
SetEnvironmentVariableA
LocalCompact
FindFirstFileW
WaitCommEvent
BackupRead
CompareStringW
GetCommState
GetPrivateProfileStructA
FindNextVolumeMountPointA
LocalFileTimeToFileTime
GetLongPathNameW
FindAtomA
CommConfigDialogA
GetTimeFormatW
QueueUserWorkItem
GetStringTypeExA
VerifyVersionInfoA
SetErrorMode
FreeUserPhysicalPages
GetAtomNameW
GetTempPathA
SetThreadIdealProcessor
GetFileTime
MulDiv
GetThreadPriorityBoost
CreateFileMappingA
IsBadStringPtrW
VerSetConditionMask
ContinueDebugEvent
ReplaceFileA
SetNamedPipeHandleState
GetCompressedFileSizeW
SetTapePosition
DnsHostnameToComputerNameW
DeviceIoControl
lstrcpyW
GetModuleHandleW
FileTimeToSystemTime
GetPrivateProfileSectionW
SetHandleInformation
TlsSetValue
GetDateFormatA
GetComputerNameW
PrepareTape
GetFileInformationByHandle
WaitNamedPipeA
EnumDateFormatsExW
SetFileApisToOEM
ReadDirectoryChangesW
GetThreadLocale
GetCurrentDirectoryA
EnumResourceLanguagesW
FindResourceW
_hread
GlobalFix
ProcessIdToSessionId
LoadResource
LocalUnlock
GetFileAttributesExW
GetNumberFormatW
ResumeThread
_llseek
FoldStringW
SetLocalTime
CreateFileMappingW
GetCurrentThread
GetVolumeNameForVolumeMountPointW
lstrcpyA
CompareStringA
GetOverlappedResult
FileTimeToDosDateTime
SetCalendarInfoW
FlushViewOfFile
QueryPerformanceCounter
SearchPathA
ResetEvent
GetThreadPriority
GetSystemInfo
user32
DestroyWindow
CharUpperBuffW
TrackPopupMenuEx
ChildWindowFromPoint
CreateCaret
SetShellWindow
DlgDirListW
MessageBoxIndirectW
IsZoomed
GetGUIThreadInfo
SetSysColors
MsgWaitForMultipleObjects
CallWindowProcW
GetKeyState
LoadCursorFromFileW
TrackMouseEvent
GetWindowRgn
SetMenuItemInfoA
CopyImage
GetMessageA
GetLastInputInfo
EnableWindow
VkKeyScanA
CharLowerW
DdeGetData
shlwapi
PathAppendA
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 615KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ