Static task
static1
Behavioral task
behavioral1
Sample
4e8225e38a577db65cfa7984d95d0c8e90e4d5cbdff2118aab6d384fc4fb07d2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4e8225e38a577db65cfa7984d95d0c8e90e4d5cbdff2118aab6d384fc4fb07d2.exe
Resource
win10v2004-20220812-en
General
-
Target
4e8225e38a577db65cfa7984d95d0c8e90e4d5cbdff2118aab6d384fc4fb07d2
-
Size
703KB
-
MD5
5868a215272b24abca26be60fff2e2b0
-
SHA1
c7f715c22eb83d229d2a137177d85ed06b606246
-
SHA256
4e8225e38a577db65cfa7984d95d0c8e90e4d5cbdff2118aab6d384fc4fb07d2
-
SHA512
787ef18bbaeda84e22781a2ac951e04f7eb9abfe03b8a8cf48ed88fb3dda1cf0379dff0d33230deed16958041c62b622cf3d07b3273050c67f2cda6cd6494f41
-
SSDEEP
12288:n9HWcQQsuth82I5YN8JCfPwpYDJ0HMJggpTHDLTafF0TsP68uZVIbStIuFRbSsPH:nZmkI2CmPwpYDJ0FgZHDXAF0TZ8+C2tP
Malware Config
Signatures
Files
-
4e8225e38a577db65cfa7984d95d0c8e90e4d5cbdff2118aab6d384fc4fb07d2.exe windows x86
8475707650c1aa909944b4b1166c146a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
FreeLibrary
CreateProcessW
LoadLibraryW
Sleep
GetModuleFileNameW
GetProcAddress
MoveFileExW
GetLastError
MoveFileW
DeleteFileW
GetModuleHandleW
GetPriorityClass
GetThreadPriority
SetPriorityClass
SetThreadPriority
QueryPerformanceFrequency
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
CreateFileA
UnmapViewOfFile
ExitProcess
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
LCMapStringA
HeapSize
CloseHandle
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
LeaveCriticalSection
EnterCriticalSection
CreateEventW
InitializeCriticalSection
SetEvent
WaitForSingleObject
ResetEvent
GetCurrentThread
ReadFile
SetFilePointer
CreateFileW
SetEndOfFile
WriteFile
RemoveDirectoryW
WideCharToMultiByte
MultiByteToWideChar
VirtualProtect
VirtualAlloc
VirtualFree
HeapAlloc
GetProcessHeap
HeapFree
GetFileAttributesW
GetOverlappedResult
CopyFileW
SetConsoleTextAttribute
GetStdHandle
GetConsoleScreenBufferInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
GetTimeZoneInformation
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
FindNextFileW
CreateDirectoryW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
WriteConsoleW
GetFileType
GetDriveTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCurrentDirectoryA
GetDriveTypeA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetModuleHandleA
user32
MoveWindow
SetWindowTextW
SendMessageW
SetDlgItemTextW
MessageBoxW
CreateDialogParamW
ShowWindow
TranslateMessage
GetWindowDC
PostQuitMessage
GetMessageW
GetWindowRect
DestroyWindow
FindWindowW
LoadStringW
wsprintfW
DispatchMessageW
gdi32
GetDeviceCaps
ole32
OleInitialize
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ws2_32
getsockopt
select
connect
WSAGetLastError
ioctlsocket
send
htons
setsockopt
gethostbyname
closesocket
WSACleanup
socket
WSAStartup
recv
Sections
.text Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ