Static task
static1
Behavioral task
behavioral1
Sample
4c4d93c1565cc75cd99e1794577fb572279e834d1e59a509e4959309dedf3ab9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c4d93c1565cc75cd99e1794577fb572279e834d1e59a509e4959309dedf3ab9.exe
Resource
win10v2004-20220812-en
General
-
Target
4c4d93c1565cc75cd99e1794577fb572279e834d1e59a509e4959309dedf3ab9
-
Size
84KB
-
MD5
8f1b17696ab6515b76657f1fe710e6a8
-
SHA1
03bf8a54f457c4c0f412aab86880f380402588ee
-
SHA256
4c4d93c1565cc75cd99e1794577fb572279e834d1e59a509e4959309dedf3ab9
-
SHA512
d1f55c7d9a7e7280ab6312108f1f5c3bd53fa22f0aa977c070cdc6d48c334865fc973e320bd5e2d5b76f4ff1a6fb7736f8bff4edcdf1f9981c6b81b48d48659b
-
SSDEEP
1536:ERZAiPjB2mg/4ueu5adPtrEsKZzkuJi8A1r+eBA1kX:EXwlVeuEdPloPJi8A1Se+1kX
Malware Config
Signatures
Files
-
4c4d93c1565cc75cd99e1794577fb572279e834d1e59a509e4959309dedf3ab9.exe windows x86
6b7f0683b3824fa8c276c681a2ecc689
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapSize
LoadLibraryW
HeapReAlloc
RtlUnwind
MultiByteToWideChar
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetSystemTimeAsFileTime
FlushFileBuffers
CreateFileW
GetProcAddress
GetSystemTime
GetLastError
GetCurrentProcess
GlobalAlloc
GlobalFree
FindFirstFileA
GetFileAttributesA
FindNextFileA
FindClose
GetModuleFileNameW
CreateFileA
GetFileSize
GetProcessHeaps
GetProcessTimes
CreateEventA
SetEvent
CloseHandle
GetLocalTime
SetLocalTime
lstrlenA
OpenProcess
lstrlenW
LocalAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
RaiseException
HeapAlloc
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
LocalFree
GetCPInfo
LoadLibraryA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
user32
GetSysColor
DialogBoxParamA
LoadStringA
SetFocus
MessageBoxA
DrawTextA
GetSystemMetrics
SetWindowTextA
SendMessageA
LoadIconW
MessageBoxW
wsprintfA
GetDlgItem
DestroyIcon
GetDC
WindowFromDC
GetClientRect
SetRect
FillRect
InvalidateRect
EndDialog
ReleaseDC
GetWindowTextA
gdi32
CreateSolidBrush
SetBkMode
SetTextColor
SetBkColor
DeleteObject
GetObjectA
CreateDIBSection
CreateCompatibleDC
SelectObject
GetCurrentObject
GetPaletteEntries
BitBlt
DeleteDC
CreatePalette
SelectPalette
RealizePalette
EnumFontFamiliesA
SetDIBColorTable
comdlg32
GetFileTitleW
advapi32
AllocateAndInitializeSid
LookupPrivilegeValueA
ConvertSidToStringSidA
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
EqualSid
LookupAccountSidA
FreeSid
shell32
SHGetFolderPathW
SHGetMalloc
SHGetFileInfoW
SHGetFileInfoA
oleaut32
OleTranslateColor
ws2_32
ioctlsocket
recvfrom
sendto
closesocket
psapi
GetProcessMemoryInfo
shlwapi
StrDupA
comctl32
ImageList_Create
ImageList_ReplaceIcon
ImageList_Add
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ