Static task
static1
Behavioral task
behavioral1
Sample
b471b846aa12bd3f4e64db356f5eab3e2150a821b6bb46a60eda8b1d9b24ee9c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b471b846aa12bd3f4e64db356f5eab3e2150a821b6bb46a60eda8b1d9b24ee9c.exe
Resource
win10v2004-20221111-en
General
-
Target
b471b846aa12bd3f4e64db356f5eab3e2150a821b6bb46a60eda8b1d9b24ee9c
-
Size
275KB
-
MD5
1334e616bb5cc11e6b1e28f05c44631d
-
SHA1
ca806b2bb567d09be1635c6a71fb2bb3f9ccc637
-
SHA256
b471b846aa12bd3f4e64db356f5eab3e2150a821b6bb46a60eda8b1d9b24ee9c
-
SHA512
e348b23336e84d0be8e8866590d19d583fce0ed7b6f83962a7b4b3568c76d57237eaf01fbe2c17e7177c5500cebb95aab2427f4d41db2065122540b1c66bddb7
-
SSDEEP
6144:cz6BqWdyto+cbIxUW+b0FgVHx2zFIeIy53:czYqxo+uYU9YgHIzB53
Malware Config
Signatures
Files
-
b471b846aa12bd3f4e64db356f5eab3e2150a821b6bb46a60eda8b1d9b24ee9c.exe windows x86
d6eb07923c9b112f113dd9064a73ee18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuState
GetWindowPlacement
AppendMenuA
PeekMessageW
SetWindowLongA
InvertRect
wsprintfA
ShowWindow
GetDialogBaseUnits
DialogBoxParamW
CallWindowProcW
wvsprintfW
TrackMouseEvent
PaintDesktop
KillTimer
DrawAnimatedRects
GetCapture
CopyIcon
IsGUIThread
IsWindowVisible
GetActiveWindow
ChildWindowFromPointEx
GetSysColor
GetWindowTextLengthW
IsCharAlphaNumericA
GetWindowTextLengthA
NotifyWinEvent
GetQueueStatus
UpdateWindow
GetWindowRgn
GetSubMenu
DeferWindowPos
ole32
CoCreateInstance
advapi32
RegDeleteValueW
RegCreateKeyA
RegDeleteKeyW
gdi32
CombineRgn
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
VirtualAlloc
EnumResourceNamesW
GetFileInformationByHandle
SetLastError
GetVersion
FreeResource
LocalShrink
ClearCommError
FlushInstructionCache
SetMailslotInfo
GlobalUnfix
HeapAlloc
GetProcessHeap
IsProcessInJob
LockResource
GetPriorityClass
GetNamedPipeInfo
GetProcessPriorityBoost
GetTempPathW
ExpandEnvironmentStringsA
lstrlenA
SetPriorityClass
GetModuleFileNameA
InitializeCriticalSection
GetLogicalDriveStringsW
DebugSetProcessKillOnExit
GetEnvironmentVariableW
GlobalFlags
FindClose
GetExitCodeThread
GetSystemDefaultLangID
IsBadCodePtr
SuspendThread
GetFileType
WideCharToMultiByte
TlsAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ