Static task
static1
Behavioral task
behavioral1
Sample
4e0aec60a06c5eb52db291a63b579bbc2a7b8fe9c9536d8d7440a54f3b9dc687.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4e0aec60a06c5eb52db291a63b579bbc2a7b8fe9c9536d8d7440a54f3b9dc687.exe
Resource
win10v2004-20221111-en
General
-
Target
4e0aec60a06c5eb52db291a63b579bbc2a7b8fe9c9536d8d7440a54f3b9dc687
-
Size
631KB
-
MD5
a2a1d8d2c7294166beb3233c686fbe99
-
SHA1
9d802a9efacf3db96d4f0553d5feda0f3a36effa
-
SHA256
4e0aec60a06c5eb52db291a63b579bbc2a7b8fe9c9536d8d7440a54f3b9dc687
-
SHA512
69213cab2767d2439c827167d380902e8e154aa3da65cfca5061f8c002d0542b6c65624709c81533d79b464b561799a01b8761654a797ec71634b8dbd5d0e0b0
-
SSDEEP
12288:I+PYWKU+jWhtlGTO724AGdzOlmZy/t7IOj9daUG1Mxk9PmVUBo6LwwtA:I0YWcSht8672T4wIc9daUG119PCiJtA
Malware Config
Signatures
Files
-
4e0aec60a06c5eb52db291a63b579bbc2a7b8fe9c9536d8d7440a54f3b9dc687.exe windows x86
92e7c999f2ebc114ea672f7832779164
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
SetBkColor
SelectObject
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
kernel32
GetStdHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentProcessId
GetModuleHandleA
GetVersion
GetCommandLineA
GetCurrentThreadId
GetLastError
ExitProcess
VirtualAlloc
Sleep
VirtualFree
HeapCreate
ReadFile
SetFilePointer
TlsFree
RaiseException
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
SizeofResource
lstrlenW
GetEnvironmentStringsW
GetThreadLocale
lstrlenA
GetSystemInfo
LCMapStringW
LeaveCriticalSection
TlsSetValue
GetFileType
CompareStringA
GetCPInfo
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
TerminateProcess
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
HeapAlloc
IsDebuggerPresent
InterlockedDecrement
SetLastError
FormatMessageA
TlsGetValue
LocalFree
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
SetStdHandle
SetErrorMode
GetLocaleInfoA
user32
SendMessageA
InvalidateRect
IsWindowVisible
SystemParametersInfoA
GetSysColor
SetForegroundWindow
LoadIconA
LoadCursorA
CheckMenuItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetSystemMetrics
SetTimer
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
GetParent
DestroyWindow
GetDC
DispatchMessageA
IsWindow
SetWindowPos
Sections
.text Size: 600KB - Virtual size: 926KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ