Static task
static1
Behavioral task
behavioral1
Sample
410ed576e62b3e8be515f4997b9195a30e251d62049ce06e6c7c7cf08a6424d3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
410ed576e62b3e8be515f4997b9195a30e251d62049ce06e6c7c7cf08a6424d3.exe
Resource
win10v2004-20221111-en
General
-
Target
410ed576e62b3e8be515f4997b9195a30e251d62049ce06e6c7c7cf08a6424d3
-
Size
316KB
-
MD5
8e4258ca56a28fe733c285a324b6e279
-
SHA1
bff0dc32e1ed3c4d6e0baed5c33c2bed8b185373
-
SHA256
410ed576e62b3e8be515f4997b9195a30e251d62049ce06e6c7c7cf08a6424d3
-
SHA512
8350096bea429de445ad705a4b060b5f3def3a47b6879781e35a5f4ab399fcd1168c1c1d9522a659df7646a419f726ed47783c8d9cd248ecb661edaaf8108fb1
-
SSDEEP
6144:Pa+h3s/4GUDElXT7SJqaEZbAdBrwPyn+fLYRb1ey0qem:Th3nNElXT7SJqDZbMn+8RbNde
Malware Config
Signatures
Files
-
410ed576e62b3e8be515f4997b9195a30e251d62049ce06e6c7c7cf08a6424d3.exe windows x86
2c76edcf3b286a91a6e98e55402da909
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
WritePrivateProfileStructA
CreateNamedPipeW
WritePrivateProfileSectionA
SetSystemTime
SetProcessShutdownParameters
LocalLock
EnumCalendarInfoW
GetModuleHandleA
VirtualAlloc
GetStartupInfoA
user32
OemToCharBuffW
GetQueueStatus
SetDlgItemInt
RegisterWindowMessageW
SetCaretBlinkTime
DialogBoxIndirectParamA
SetCapture
IsCharAlphaW
GetUpdateRgn
CopyAcceleratorTableA
DefFrameProcW
ShowScrollBar
ChangeMenuW
CharNextExA
ExitWindowsEx
SetMenuItemInfoA
DefFrameProcA
DefDlgProcW
LoadMenuA
CharNextW
FrameRect
GetMessageW
GetMessageExtraInfo
ClientToScreen
ChangeMenuA
ScrollWindow
GetCursor
GetClassInfoW
DrawTextExW
TranslateMessage
OpenWindowStationA
GetProcessWindowStation
ScrollWindowEx
LoadIconW
GetClipboardFormatNameW
SetPropW
GetDlgItemTextA
RegisterClassExA
EnableWindow
SetWindowPos
TranslateMDISysAccel
LoadMenuIndirectW
SetWindowPlacement
CreateDesktopA
GetMenu
DrawCaption
CreateCaret
CharUpperBuffW
GetScrollInfo
GetAsyncKeyState
gdi32
PlayMetaFileRecord
GetPixel
GetSystemPaletteUse
SetDIBits
MaskBlt
SelectPalette
Arc
ArcTo
CopyMetaFileA
GetWindowOrgEx
TextOutA
SetColorAdjustment
GetClipBox
CreateDIBSection
RealizePalette
SetGraphicsMode
LineTo
SetArcDirection
TranslateCharsetInfo
comdlg32
ChooseColorW
FindTextW
GetSaveFileNameW
advapi32
CryptHashData
QueryServiceConfigA
UnlockServiceDatabase
StartServiceCtrlDispatcherA
CryptCreateHash
CreateServiceA
CryptAcquireContextW
ChangeServiceConfigW
RegSaveKeyA
GetSecurityDescriptorLength
ImpersonateSelf
CryptExportKey
RegOpenKeyA
ObjectCloseAuditAlarmA
GetLengthSid
SetKernelObjectSecurity
EnumServicesStatusW
GetCurrentHwProfileW
LookupAccountNameW
AbortSystemShutdownW
StartServiceW
DeregisterEventSource
AccessCheckAndAuditAlarmW
GetServiceDisplayNameA
SetSecurityDescriptorGroup
CopySid
SetNamedSecurityInfoW
RegEnumValueA
QueryServiceConfigW
ImpersonateNamedPipeClient
InitiateSystemShutdownW
RegSaveKeyW
RegSetValueA
OpenServiceA
RegCreateKeyW
RegQueryValueExA
GetUserNameW
GetPrivateObjectSecurity
RegDeleteValueA
ReadEventLogW
shell32
SHBrowseForFolderA
DragQueryPoint
SHGetSettings
SHGetSpecialFolderPathW
ole32
WriteClassStg
CreateOleAdviseHolder
CoGetObject
CoReleaseServerProcess
CoTreatAsClass
OleLockRunning
GetClassFile
StringFromGUID2
CoCreateInstance
oleaut32
SysAllocStringLen
SafeArrayGetElement
SafeArrayUnaccessData
VariantCopy
VariantChangeType
SafeArrayPutElement
QueryPathOfRegTypeLi
comctl32
ImageList_Destroy
ImageList_GetImageCount
ImageList_ReplaceIcon
msvcrt
_XcptFilter
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE