Static task
static1
Behavioral task
behavioral1
Sample
4cfdaf458adf5ebe2fe54c997cea7e4ef0de16f0d2ef9e42b97d763300ba0c8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cfdaf458adf5ebe2fe54c997cea7e4ef0de16f0d2ef9e42b97d763300ba0c8c.exe
Resource
win10v2004-20221111-en
General
-
Target
4cfdaf458adf5ebe2fe54c997cea7e4ef0de16f0d2ef9e42b97d763300ba0c8c
-
Size
709KB
-
MD5
07bca15ab7b1f808e0ab64fced802420
-
SHA1
c0ecbcfaa65cf9c91d625aba24eb57ee5b10cee8
-
SHA256
4cfdaf458adf5ebe2fe54c997cea7e4ef0de16f0d2ef9e42b97d763300ba0c8c
-
SHA512
1f586925f4fe022fe8e23b6a9f00110bf5de05a48efe73e331f271066202b0f47e6f57b4d46b3f4a94d46ddfc741e08306d971c6a7b3651ac42cb41c628ad6f2
-
SSDEEP
12288:TgRlKnfCJe/s59r/ZJtAu4bVNno4ygL6MpCI3LI0HQr97Q1kCgUsmFnmZz34j3O:TwlKnX/sn3tmbVNo4yg+GH3LI0ik1kGa
Malware Config
Signatures
Files
-
4cfdaf458adf5ebe2fe54c997cea7e4ef0de16f0d2ef9e42b97d763300ba0c8c.exe windows x86
4d212867cd0ca81e4247b4b7a7e65505
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
msacm32
acmFormatTagDetailsA
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
acmStreamClose
comctl32
ord17
kernel32
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCurrentProcess
GetVersionExA
CreateProcessA
ExpandEnvironmentStringsA
GetExitCodeProcess
LocalFileTimeToFileTime
SystemTimeToFileTime
RemoveDirectoryA
Sleep
DeleteFileA
GetTempPathA
SetFileAttributesA
CopyFileA
CreateMutexA
GetDriveTypeA
CompareFileTime
WaitForSingleObject
GetLastError
CreateEventA
SetEvent
OpenEventA
GetModuleFileNameA
GetUserDefaultLangID
SetErrorMode
SetStdHandle
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
HeapCreate
FlushFileBuffers
TlsGetValue
SetLastError
SetFileTime
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
TerminateProcess
RtlUnwind
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
VirtualFree
VirtualAlloc
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcmpiA
SetFilePointer
GetLocaleInfoA
GetLocaleInfoW
GetFileSize
GetFileTime
CloseHandle
WriteFile
ReadFile
CreateFileA
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
ExitProcess
HeapDestroy
GetFileAttributesA
user32
PostMessageA
MoveWindow
GetAsyncKeyState
KillTimer
EnableMenuItem
GetWindowLongA
SetWindowLongA
GetSysColorBrush
CallWindowProcA
GetClientRect
GetDesktopWindow
GetDC
ReleaseDC
EnumDisplaySettingsA
GetSysColor
FillRect
CopyRect
GetSystemMetrics
DrawFrameControl
DrawIcon
DrawTextA
RedrawWindow
FindWindowA
SetFocus
EnableWindow
ShowWindow
LoadIconA
LoadCursorA
SetCursor
SetTimer
DialogBoxParamA
CreateDialogParamA
SendDlgItemMessageA
MessageBeep
GetDlgItem
EndDialog
SetDlgItemTextA
GetParent
SendMessageA
PeekMessageA
DispatchMessageA
SetForegroundWindow
SetWindowTextA
DestroyWindow
MessageBoxA
IsIconic
UnregisterHotKey
RegisterHotKey
SetCursorPos
ChangeDisplaySettingsA
GetForegroundWindow
SystemParametersInfoA
GetFocus
GetSystemMenu
gdi32
GetStockObject
GetObjectA
GetTextExtentPoint32A
TextOutA
SetBkColor
GetDeviceCaps
SelectObject
SetTextColor
SetBkMode
DeleteObject
CreateFontIndirectA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 581KB - Virtual size: 923KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE