Static task
static1
Behavioral task
behavioral1
Sample
f4b5355dca951debd9d2dab8957051c45ab116825e9058f0acefc0fb3d6be627.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4b5355dca951debd9d2dab8957051c45ab116825e9058f0acefc0fb3d6be627.exe
Resource
win10v2004-20220812-en
General
-
Target
f4b5355dca951debd9d2dab8957051c45ab116825e9058f0acefc0fb3d6be627
-
Size
492KB
-
MD5
020a49dc44e648b381afaf07000f00a0
-
SHA1
766994fa5ff0991d20a586a2f4c063799cf5d550
-
SHA256
f4b5355dca951debd9d2dab8957051c45ab116825e9058f0acefc0fb3d6be627
-
SHA512
ce7facfee5b0668d8ef50aae7fb94525f58f51a878cfa87cd0f4e6daca0335f531491a3669182d6953b3ed6c07c38966903e9617767d693b9f9f6df2cc24f74c
-
SSDEEP
6144:Zh2PEkEvAzwdpFmdJazNImb00NUy/CaccI29guJzaMCcUgXr/+:lvN7Fsyb0M3/Scy64PgXL+
Malware Config
Signatures
Files
-
f4b5355dca951debd9d2dab8957051c45ab116825e9058f0acefc0fb3d6be627.exe windows x86
48f77d32691d7a71a390604d99007f91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetPriorityClass
GlobalFree
SuspendThread
GetPrivateProfileStringW
FindAtomA
GetModuleFileNameA
LocalFree
GetProcessTimes
HeapCreate
ReadFile
GetDriveTypeW
GetFileAttributesA
GetCurrentProcessId
EnterCriticalSection
EnumCalendarInfoW
FindClose
CreateMailslotA
GetModuleHandleA
GetCurrentThreadId
user32
CallWindowProcW
DispatchMessageA
DrawTextW
GetWindowInfo
GetSysColor
GetClientRect
SetFocus
GetKeyboardType
GetWindowLongA
GetClassInfoA
GetKeyState
IsWindow
DispatchMessageA
colbact
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
desk.cpl
DeskSetCurrentScheme
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 482KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ