Static task
static1
Behavioral task
behavioral1
Sample
4df0f9cb5b300f019c91ddb34565f8512cf99b8e36ff8f992c40b33506ed96a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4df0f9cb5b300f019c91ddb34565f8512cf99b8e36ff8f992c40b33506ed96a1.exe
Resource
win10v2004-20220812-en
General
-
Target
4df0f9cb5b300f019c91ddb34565f8512cf99b8e36ff8f992c40b33506ed96a1
-
Size
1.0MB
-
MD5
dbda8599cdbb8b05c18c71607c2e134f
-
SHA1
7a6e61f60ae258418e4e9083ef31c9f3891f2c9e
-
SHA256
4df0f9cb5b300f019c91ddb34565f8512cf99b8e36ff8f992c40b33506ed96a1
-
SHA512
7e5cc5324a7fee0c7d79fc85a779206b587df9ac949164c7aeec80db9f8e14ad138a1ba255f134bf3829d48a263c66d3ecdbb614a802a1acf2f7de9f67e2918c
-
SSDEEP
24576:nG/bdsV8zLAUZlFMjSSNruXNpy+DmuDzte/aozkl27:noZvnZjM1N0pZASkcq
Malware Config
Signatures
Files
-
4df0f9cb5b300f019c91ddb34565f8512cf99b8e36ff8f992c40b33506ed96a1.exe windows x86
fd1433c3f5092e59142eb167c6b1117f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
GetMessageA
IsDialogMessageA
LoadIconA
MessageBoxW
RegisterClassExA
SetFocus
SetWindowTextW
TranslateMessage
UnregisterClassA
UpdateWindow
wvsprintfW
CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
ExitWindowsEx
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PostQuitMessage
advapi32
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegEnumValueA
kernel32
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
WriteConsoleA
HeapCreate
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
Sleep
GetModuleHandleW
RtlUnwind
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
VirtualFree
GetCurrentThreadId
VirtualAlloc
CloseHandle
CreateThread
GetLastError
CreateMutexA
ReleaseMutex
WaitForSingleObject
CopyFileA
MulDiv
FindClose
SetFilePointer
ReadFile
WriteFile
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcess
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetCommandLineA
GetStartupInfoA
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 897KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 893KB - Virtual size: 893KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ