Static task
static1
Behavioral task
behavioral1
Sample
048823060e6f01555df313af3970acb9bd0691a5633ee3c5e5d066a434a7b480.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
048823060e6f01555df313af3970acb9bd0691a5633ee3c5e5d066a434a7b480.exe
Resource
win10v2004-20221111-en
General
-
Target
048823060e6f01555df313af3970acb9bd0691a5633ee3c5e5d066a434a7b480
-
Size
840KB
-
MD5
b4a18e1135da4a0b22ec82ab5892a37f
-
SHA1
716836a3a7ba8581d03fcd47a17a9f87bc069ad2
-
SHA256
048823060e6f01555df313af3970acb9bd0691a5633ee3c5e5d066a434a7b480
-
SHA512
4de46651c5eb1c3729485576e41b721a6eec2a456183c1cc70613cddbc8c917b23e4540ac963b3b02f459c804707e1af1e6a4ac01248b0756fbafd21deb8cf51
-
SSDEEP
24576:kwdy7V0Gv6d4QG/lMakTkYRsFgC8LjNUAItY+uoWeBzmW5:TY6doiTtsurL
Malware Config
Signatures
Files
-
048823060e6f01555df313af3970acb9bd0691a5633ee3c5e5d066a434a7b480.exe windows x86
4ef9f51909238937a589f124d9fc5b99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHQueryRecycleBinW
SHGetMalloc
SHGetPathFromIDListW
user32
OpenDesktopW
GetParent
GetScrollPos
UpdateWindow
CharNextA
PaintDesktop
DestroyMenu
SetWindowTextW
EnumClipboardFormats
SendInput
RealChildWindowFromPoint
GetClipboardOwner
UnpackDDElParam
DefWindowProcA
EmptyClipboard
PostMessageW
RemovePropW
UnhookWindowsHook
DdePostAdvise
EnumDisplaySettingsExW
CharToOemA
FindWindowA
VkKeyScanA
OemToCharA
CreateCursor
DefDlgProcA
EnableScrollBar
DdeAbandonTransaction
TileWindows
WINNLSEnableIME
CreateWindowExW
UnhookWinEvent
RealGetWindowClass
GetDlgItemInt
GetOpenClipboardWindow
IsCharUpperW
MsgWaitForMultipleObjectsEx
MessageBoxW
DlgDirListComboBoxA
PostQuitMessage
ShowWindow
RegisterClassA
RegisterDeviceNotificationW
RegisterClassExA
DestroyWindow
GetAncestor
GetKeyboardState
DragDetect
GetWindowInfo
DdeQueryStringA
GetScrollBarInfo
LoadCursorA
DialogBoxIndirectParamW
GetTabbedTextExtentW
GetClassInfoExW
MessageBoxExW
DefMDIChildProcW
CharLowerBuffW
DestroyCursor
CreateAcceleratorTableA
MapVirtualKeyExA
kernel32
CompareStringA
SetEnvironmentVariableW
LeaveCriticalSection
GetSystemTimeAsFileTime
FillConsoleOutputCharacterW
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
InterlockedExchange
IsDebuggerPresent
GetModuleHandleA
LocalFree
HeapCreate
GetFileType
VirtualQuery
GetWindowsDirectoryW
CompareStringW
EnumResourceTypesW
TerminateProcess
Sleep
GetConsoleOutputCP
SetCurrentDirectoryW
WriteConsoleA
SetUnhandledExceptionFilter
GetCommandLineA
CreateMutexA
GetOEMCP
InitializeCriticalSectionAndSpinCount
TlsSetValue
VirtualFree
WriteConsoleW
EnterCriticalSection
OpenMutexA
ExpandEnvironmentStringsA
GetCurrentProcessId
ReadFile
FlushFileBuffers
GetProcAddress
HeapReAlloc
CreateSemaphoreW
GetLocaleInfoA
QueryPerformanceCounter
GetUserDefaultLCID
WideCharToMultiByte
GetStdHandle
GetACP
GetLastError
CompareFileTime
VirtualAlloc
lstrcmpW
SetFilePointer
CloseHandle
FreeLibrary
SetEnvironmentVariableA
GetDateFormatA
CreateFileA
GetTimeFormatA
TlsFree
GetTickCount
MultiByteToWideChar
SetHandleCount
SetTimeZoneInformation
GetModuleFileNameA
SetConsoleCtrlHandler
RtlUnwind
GlobalDeleteAtom
SetConsoleCursorPosition
IsValidLocale
GetStartupInfoA
TlsAlloc
InterlockedDecrement
ContinueDebugEvent
GetConsoleMode
SetLastError
GetConsoleCP
UnhandledExceptionFilter
GetCompressedFileSizeW
GetDiskFreeSpaceExW
ExitProcess
LCMapStringW
GetCurrentThread
GetModuleHandleW
lstrlen
EnumDateFormatsExW
GetTimeZoneInformation
WriteConsoleOutputCharacterA
GetPrivateProfileIntW
GetEnvironmentStrings
InterlockedIncrement
HeapAlloc
GetProcessShutdownParameters
GetCurrentProcess
GetCurrentThreadId
EnumSystemLocalesA
WriteFile
DeleteCriticalSection
FreeEnvironmentStringsA
TlsGetValue
HeapFree
LCMapStringA
GetConsoleTitleW
HeapSize
GetNamedPipeHandleStateA
FreeEnvironmentStringsW
GetTimeFormatW
lstrcpynW
GetLocaleInfoW
IsValidCodePage
LoadLibraryA
HeapDestroy
GetStringTypeW
GetStringTypeA
wininet
SetUrlCacheEntryGroupW
InternetGetLastResponseInfoA
InternetSetDialState
InternetCloseHandle
comctl32
ImageList_GetBkColor
ImageList_SetOverlayImage
ImageList_Replace
ImageList_Merge
ImageList_Copy
DrawStatusText
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_Draw
CreateStatusWindowA
CreateStatusWindowW
ImageList_SetImageCount
InitCommonControlsEx
GetEffectiveClientRect
ImageList_DragEnter
ImageList_Remove
ImageList_SetFilter
CreateMappedBitmap
ImageList_SetIconSize
comdlg32
GetFileTitleW
ReplaceTextW
GetFileTitleA
Sections
.text Size: 224KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 412KB - Virtual size: 410KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ