Static task
static1
Behavioral task
behavioral1
Sample
4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b.exe
Resource
win10v2004-20220901-en
General
-
Target
4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b
-
Size
103KB
-
MD5
d3729bec572c3bb8fe3f831d98fa7c94
-
SHA1
4a90fe86fd894eaf31b699f101e2cf3be2d31406
-
SHA256
4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b
-
SHA512
896806603a56b8239165db60d9c0d473b904f5d6f673fa7083b5424fdc4ab473aa2c2b8b8d3557e43d99be4e8af4ca28c341161ff990a2939e5ae42d46d8a827
-
SSDEEP
1536:cgKJn+wJf4nJtIJAz7z+Nc9sZrvrdPpbntnpn1nVn5n1nzJ3H1Tn1nVnZnxnZnth:cXJwE2fi4sZtuVmQ6h
Malware Config
Signatures
Files
-
4b0dff5cc2ff949eb05f43c111c541bb0906bc63a8068816e7317e8411f4ff8b.exe windows x86
2a129e7dfcb7d3fd50cfd9a739620871
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
InitializeCriticalSection
MultiByteToWideChar
lstrcatW
lstrcmpW
lstrcpyW
lstrlenW
GetSystemDirectoryW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetLastError
GetFileAttributesW
FreeLibrary
FormatMessageW
EnterCriticalSection
DeleteFileW
CreateMutexW
CloseHandle
GetModuleHandleA
Sleep
LocalFree
VirtualAlloc
user32
IsWindow
KillTimer
LoadStringW
MapWindowPoints
MessageBoxW
PostMessageW
SendMessageW
SetActiveWindow
SetForegroundWindow
SetTimer
WinHelpW
wsprintfW
wvsprintfW
GetWindowRect
GetParent
GetForegroundWindow
GetDesktopWindow
GetClientRect
FindWindowW
EnableWindow
GetDC
GetKeyboardType
GetActiveWindow
DestroyWindow
GetAsyncKeyState
GetCapture
CharLowerA
CharLowerW
GetSysColorBrush
GetClipboardData
LoadIconA
GetSysColor
LoadIconW
gdi32
GetEnhMetaFileA
CancelDC
GetDCPenColor
SetMetaRgn
SetTextAlign
GetGraphicsMode
GetLayout
GetMapMode
CreateCompatibleDC
advapi32
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExA
shell32
SHGetSpecialFolderPathW
shlwapi
PathCompactPathExW
winmm
timeGetTime
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ