Static task
static1
Behavioral task
behavioral1
Sample
4cb4ff4d053d5161e93aaab93b45bed35062594395ac97a16365a03a6309af10.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4cb4ff4d053d5161e93aaab93b45bed35062594395ac97a16365a03a6309af10.exe
Resource
win10v2004-20220812-en
General
-
Target
4cb4ff4d053d5161e93aaab93b45bed35062594395ac97a16365a03a6309af10
-
Size
17.2MB
-
MD5
1f6df025771369ebe95e0d4bf5472ac2
-
SHA1
55b12e3587fbed9185d2a7a0c1ad30fa85f679c7
-
SHA256
4cb4ff4d053d5161e93aaab93b45bed35062594395ac97a16365a03a6309af10
-
SHA512
64530d3c2f9e50ccbadd11676cf9c69cfe3d81b86f294d2f7225ad48029ad14c2089ec537e1e1d6a63636bdb1b5fa9f7a06743f2f1f51e149fbfcdf07ff41f5f
-
SSDEEP
393216:wxCUPmT/ixk7HhqLVptEkmagTqwssBqF33HADOFXIqIsR66G8lylXt:sCinx7rEalG0Xav8l8
Malware Config
Signatures
Files
-
4cb4ff4d053d5161e93aaab93b45bed35062594395ac97a16365a03a6309af10.exe windows x86
46a6070348a7b7cc5b0f373aa6f059b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
KillTimer
LoadStringW
ReleaseCapture
DialogBoxParamW
PeekMessageW
GetKeyState
GetDesktopWindow
LoadBitmapW
SendMessageA
UnregisterClassA
wsprintfA
SendMessageW
IsWindowEnabled
IsDlgButtonChecked
LoadImageW
gdi32
CreateRectRgnIndirect
OffsetViewportOrgEx
SetWindowExtEx
StartPage
GetPixel
CreateMetaFileA
SetBkColor
CreateRectRgn
DeleteMetaFile
Escape
CombineRgn
Rectangle
kernel32
SetEvent
GetCommandLineA
SystemTimeToFileTime
GetCurrentThreadId
FormatMessageW
GetVersionExA
HeapFree
OutputDebugStringA
LCMapStringA
GlobalAlloc
LoadResource
CreateEventA
CreateThread
ReadFile
GetCurrentProcessId
CloseHandle
GetStartupInfoA
GetFileAttributesW
SetFilePointer
GetProcAddress
ReleaseMutex
InterlockedDecrement
ExitProcess
SetConsoleCP
HeapCreate
CreateEventW
VirtualQuery
OpenEventA
_lopen
GetSystemTimeAsFileTime
advapi32
RegCloseKey
CryptExportKey
MakeSelfRelativeSD
RegEnumKeyA
DeregisterEventSource
CryptImportKey
RegOpenKeyExW
RegCreateKeyA
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ