Static task
static1
Behavioral task
behavioral1
Sample
c4a6e2a61bb65a5893284ad5fc8e96fde3d189f89edc1ea75799329b556c28b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4a6e2a61bb65a5893284ad5fc8e96fde3d189f89edc1ea75799329b556c28b7.exe
Resource
win10v2004-20221111-en
General
-
Target
c4a6e2a61bb65a5893284ad5fc8e96fde3d189f89edc1ea75799329b556c28b7
-
Size
480KB
-
MD5
72ee7d175b2a9b4748bb1f332ae8b407
-
SHA1
e477094547dccaf6bab7b6edbff680acb2cd7203
-
SHA256
c4a6e2a61bb65a5893284ad5fc8e96fde3d189f89edc1ea75799329b556c28b7
-
SHA512
dce008173b88f7dd090d2f09e4007fe0345b56740dd333f627fb8612ebc7f0476306fa73136410d6623ca177e6922951b0b0bf60f6ebdb43549359e676d788cf
-
SSDEEP
12288:GKVzzv6+WPUQ0gP2xhahj+P4qGuUuUDlzdMMMMMMMMMMMMMMMMMMTB:4+WPTnemoP4qGvu6zdMMMMMMMMMMMMMw
Malware Config
Signatures
Files
-
c4a6e2a61bb65a5893284ad5fc8e96fde3d189f89edc1ea75799329b556c28b7.exe windows x86
b4c68ee89b2e1f3f463af4aa117ef797
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
HeapAlloc
TerminateProcess
HeapReAlloc
HeapSize
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetVersionExA
HeapDestroy
HeapCreate
VirtualAlloc
IsBadWritePtr
HeapFree
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateFileA
GetStringTypeA
GetStringTypeW
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
RtlUnwind
ExitProcess
GetStartupInfoW
FindResourceA
GlobalAddAtomA
GetProfileStringA
FormatMessageW
GetFileTime
GetFileSize
GetFileAttributesW
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
WritePrivateProfileStringW
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SizeofResource
GetLastError
GlobalFlags
lstrcmpiW
lstrcpynW
MulDiv
SetLastError
CloseHandle
lstrcmpW
GlobalAlloc
lstrcmpA
lstrcmpiA
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
FreeLibrary
lstrlenA
MultiByteToWideChar
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
lstrlenW
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
GetModuleFileNameW
LoadLibraryA
GetProcAddress
GetCurrentProcessId
OpenProcess
SetCommState
CreateThread
GetEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentVariableA
VirtualProtect
GetSystemTimeAdjustment
GlobalLock
SetCommBreak
SetUnhandledExceptionFilter
VirtualFree
user32
PostThreadMessageW
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
PostMessageW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetScrollInfo
GetTopWindow
MessageBoxW
IsChild
RegisterClipboardFormatW
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
GetKeyState
SetWindowsHookExW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
OffsetRect
IntersectRect
SendMessageW
EnableWindow
GetMessageTime
GetWindowTextLengthA
UnregisterClassW
SetCursor
HideCaret
ShowCaret
SystemParametersInfoW
GetWindowPlacement
GetWindowRect
CopyRect
GetDC
ReleaseDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamW
DestroyWindow
GetParent
CharUpperW
InvalidateRect
GetCapture
GetWindowLongW
GetDlgItem
IsWindowEnabled
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuW
LoadIconW
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
SetDlgItemTextW
GetClipboardOwner
CreateWindowExW
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableW
CharNextW
DefWindowProcW
GetSysColorBrush
LoadCursorW
InflateRect
GetDesktopWindow
PtInRect
GetClassNameW
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringW
MapDialogRect
SetWindowContextHelpId
GetMessageW
TranslateMessage
ValidateRect
CallNextHookEx
GetCursorPos
gdi32
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
OffsetViewportOrgEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
PatBlt
CreateFontA
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
IntersectClipRect
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
GetUserNameA
comctl32
ImageList_Destroy
ord17
oledlg
OleUIBusyW
ole32
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize
olepro32
ord253
oleaut32
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
psapi
GetModuleFileNameExW
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ