Static task
static1
Behavioral task
behavioral1
Sample
408fd1117a4798adfea372709ad90daa298a1bd406be5f5a20a4208fed9f36f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
408fd1117a4798adfea372709ad90daa298a1bd406be5f5a20a4208fed9f36f4.exe
Resource
win10v2004-20221111-en
General
-
Target
408fd1117a4798adfea372709ad90daa298a1bd406be5f5a20a4208fed9f36f4
-
Size
140KB
-
MD5
965838cf64eb561a5f980f45eccbb93c
-
SHA1
83b496ff20f2c76dcc7b7078b002f68b4e5735f5
-
SHA256
408fd1117a4798adfea372709ad90daa298a1bd406be5f5a20a4208fed9f36f4
-
SHA512
bf5bd59b082641a969c69446015b37aeca997d865e3cabb155e5eb527aed48648761c6a20aec86b1c25f741d2e02981d138dee140b64a6ce67c13522421f5944
-
SSDEEP
3072:tz9hvI5FwUN4Rlmi5haP5Tfvnzs5XMOtHL+f/XQSd:Z3MFwJRlfhaPVvnzsdZOQc
Malware Config
Signatures
Files
-
408fd1117a4798adfea372709ad90daa298a1bd406be5f5a20a4208fed9f36f4.exe windows x86
cdaa42f24655f84b5fb3ebd4c58c5c95
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
AppendMenuA
EnumDesktopsA
SetDlgItemInt
GetKeyNameTextW
ChildWindowFromPoint
SetMenuItemInfoA
SwapMouseButton
SetWindowPlacement
CreateWindowStationW
DefMDIChildProcW
PeekMessageW
ClientToScreen
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
CreateAcceleratorTableA
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
ole32
CoUnmarshalInterface
WriteClassStm
OleQueryCreateFromData
OleCreate
CreateILockBytesOnHGlobal
CoMarshalInterThreadInterfaceInStream
OleRun
StgGetIFillLockBytesOnILockBytes
advapi32
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
SetFilePointer
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
HeapAlloc
GetCurrentProcess
QueryPerformanceCounter
HeapFree
VirtualFree
VirtualAlloc
CloseHandle
CreateThread
GetDriveTypeA
IsDBCSLeadByte
FillConsoleOutputAttribute
EnumResourceTypesW
ReadProcessMemory
CreateFileMappingA
ReadConsoleInputW
ReadConsoleOutputCharacterA
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ