Static task
static1
Behavioral task
behavioral1
Sample
47d3d4eea9d1e5f3c9f98ffd9c81f68bac9a65699e144ff541dd4d04e39b68de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47d3d4eea9d1e5f3c9f98ffd9c81f68bac9a65699e144ff541dd4d04e39b68de.exe
Resource
win10v2004-20221111-en
General
-
Target
47d3d4eea9d1e5f3c9f98ffd9c81f68bac9a65699e144ff541dd4d04e39b68de
-
Size
188KB
-
MD5
4b245ee238ef1331d74acf251feb178d
-
SHA1
4cad3f0460796ff264bd1097a9438b0afdb706ca
-
SHA256
47d3d4eea9d1e5f3c9f98ffd9c81f68bac9a65699e144ff541dd4d04e39b68de
-
SHA512
e3344dcd7779de5ddbdb632e3e6f3d3928cdf744d0135f1eb97436f6eca66f55405458afeb37c2acefb0287544f91e685d42a8b8a86e07be229d81fcb2e3713b
-
SSDEEP
3072:VuOEfVmI+5lD662ooxczqqdSF534Khkm4HEWXVoFSMvGEUNZzgC0Prxm8mt728Ke:EXfVuEd+DG4TkaVoQMuEULzgjTxdU7+C
Malware Config
Signatures
Files
-
47d3d4eea9d1e5f3c9f98ffd9c81f68bac9a65699e144ff541dd4d04e39b68de.exe windows x86
8024f0188a9764930b534df9d84f1c2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCursor
SendDlgItemMessageA
LoadStringA
GetDC
GetDlgItem
SetWindowPos
SetWindowLongA
CharNextA
DialogBoxParamA
PostQuitMessage
KillTimer
GetSysColor
EndDialog
PeekMessageA
ShowWindow
SetTimer
ReleaseDC
SetFocus
DefWindowProcA
CreateWindowExA
LoadIconA
SetDlgItemTextA
PostMessageA
GetForegroundWindow
advapi32
RegDeleteKeyA
RegFlushKey
StartServiceA
LookupAccountSidA
GetSecurityDescriptorControl
OpenServiceA
RegQueryValueExA
OpenSCManagerA
RegisterServiceCtrlHandlerA
SetSecurityDescriptorDacl
QueryServiceStatus
EqualSid
RegDeleteValueA
ControlService
RegCreateKeyExA
SetServiceStatus
RegQueryInfoKeyA
ChangeServiceConfigA
ChangeServiceConfig2A
UnlockServiceDatabase
kernel32
HeapDestroy
HeapCreate
GetStdHandle
SetHandleCount
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLastError
GetFileType
GetThreadLocale
VirtualAlloc
lstrcpynA
CreateFileA
InterlockedDecrement
CloseHandle
VirtualProtect
DeleteFileA
GetTimeZoneInformation
WritePrivateProfileStringA
GetVersionExA
FindResourceA
SizeofResource
IsValidLocale
OutputDebugStringA
GetPrivateProfileSectionA
lstrcmpA
GetFileTime
ReadProcessMemory
FlushFileBuffers
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE