Static task
static1
Behavioral task
behavioral1
Sample
a4cf5a995e8c91e995ca63f6e3ba65c71c90b916d427eb13c9306d3b8cdd563a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a4cf5a995e8c91e995ca63f6e3ba65c71c90b916d427eb13c9306d3b8cdd563a.exe
Resource
win10v2004-20220812-en
General
-
Target
a4cf5a995e8c91e995ca63f6e3ba65c71c90b916d427eb13c9306d3b8cdd563a
-
Size
716KB
-
MD5
1e43a33f9c2e9decf180ad76c3983da0
-
SHA1
46ae8547a889845ec0d33652c422b17680516145
-
SHA256
a4cf5a995e8c91e995ca63f6e3ba65c71c90b916d427eb13c9306d3b8cdd563a
-
SHA512
870955f64b58e344081f9408102dfaa2ac2c988d8e7899a68bb0dc2beaa64f8718e089399ae2296a5677890e044b308c9ad5ed0f54b38a83680b6a5c937d19f2
-
SSDEEP
12288:OjLX3Ba3THBA+1Xhoe7dJbXWOrrhNxxhWlOaszadyhM3iOrroblGBHAunIwlmwUr:OH3BaTBX1ddJbGq1xIlOaGad8M3i2roh
Malware Config
Signatures
Files
-
a4cf5a995e8c91e995ca63f6e3ba65c71c90b916d427eb13c9306d3b8cdd563a.exe windows x86
f0a2136f04c79242f0ea49047c2b4937
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
TerminateProcess
SetUnhandledExceptionFilter
HeapDestroy
IsBadCodePtr
DeleteCriticalSection
TlsSetValue
GetCurrentThreadId
GetStdHandle
CloseHandle
LCMapStringW
TlsGetValue
ExitProcess
CompareStringW
GetFileType
FreeEnvironmentStringsA
GetCPInfo
InitializeCriticalSection
FlushFileBuffers
InterlockedDecrement
SetLastError
GetCommandLineA
CreateMutexW
EnterCriticalSection
LoadLibraryA
InterlockedExchange
GetLocalTime
FreeEnvironmentStringsW
GetStringTypeA
GetStartupInfoA
RtlUnwind
SetFilePointer
InterlockedIncrement
GetEnvironmentStrings
SetHandleCount
GetEnvironmentStringsW
TlsAlloc
GlobalLock
GetTimeZoneInformation
GetModuleHandleA
GetLastError
UnhandledExceptionFilter
GetModuleHandleW
LoadLibraryW
HeapAlloc
GetStartupInfoW
HeapCreate
GetVersion
GetModuleFileNameA
HeapReAlloc
GetProcAddress
GetCommandLineW
GetSystemTimeAsFileTime
ReadFile
WriteFile
WideCharToMultiByte
HeapFree
QueryPerformanceCounter
VirtualQuery
GetCurrentProcess
SetStdHandle
VirtualAlloc
SetEnvironmentVariableA
GetStringTypeW
RaiseException
GetModuleFileNameW
GetFileTime
VirtualFree
GetTickCount
CompareStringA
LCMapStringA
LeaveCriticalSection
GetSystemTime
MultiByteToWideChar
comctl32
ImageList_Draw
ImageList_AddMasked
ImageList_GetDragImage
ord17
ImageList_Create
ImageList_DragMove
ImageList_EndDrag
ImageList_DragShowNolock
DestroyPropertySheetPage
ImageList_Merge
PropertySheetA
ImageList_DragLeave
ole32
CLSIDFromProgID
CoFreeUnusedLibraries
OleTranslateAccelerator
CoRevokeClassObject
OleRun
OleCreateFromFile
RevokeDragDrop
CoTaskMemFree
CreateILockBytesOnHGlobal
OleCreateLinkFromData
OleDuplicateData
IsAccelerator
StgCreateDocfile
OleSetMenuDescriptor
CoRegisterClassObject
OleRegGetUserType
CreateItemMoniker
StringFromGUID2
OleCreate
OleFlushClipboard
CoGetMalloc
WriteClassStm
OleIsCurrentClipboard
OleCreateLinkToFile
CreateStreamOnHGlobal
CoTaskMemAlloc
CoLockObjectExternal
CoDisconnectObject
CLSIDFromString
CreateBindCtx
GetRunningObjectTable
OleGetClipboard
StgCreateDocfileOnILockBytes
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleGetIconOfClass
CoRegisterMessageFilter
OleSave
DoDragDrop
OleLockRunning
gdi32
ExtCreatePen
InvertRgn
CreateHalftonePalette
CreatePen
SetArcDirection
EnumMetaFile
PlayMetaFileRecord
SetTextColor
CreatePenIndirect
RestoreDC
GetObjectA
CreateRectRgnIndirect
CreateSolidBrush
StrokePath
Rectangle
SetROP2
AbortDoc
SetAbortProc
Escape
CreateFontIndirectA
GetPolyFillMode
GetTextColor
SetBkMode
GetTextExtentPoint32A
Polygon
DPtoLP
GetOutlineTextMetricsA
SetPaletteEntries
GetBitmapBits
CreateDCA
RectVisible
CreateDIBPatternBrushPt
Chord
SetColorAdjustment
ExcludeClipRect
ExtFloodFill
GetCurrentPositionEx
SetTextJustification
PolyDraw
PtVisible
GetStretchBltMode
SetMapperFlags
PaintRgn
ArcTo
OffsetWindowOrgEx
GetWindowExtEx
LineTo
SetMapMode
GetPaletteEntries
LPtoDP
CreateCompatibleDC
SelectPalette
CreateEllipticRgn
FillRgn
GetClipRgn
CreatePalette
CreateEllipticRgnIndirect
SetTextCharacterExtra
EndPage
TextOutA
BitBlt
FloodFill
SetBoundsRect
GetCharABCWidthsA
GetClipBox
GetFontData
StartPage
SaveDC
ResizePalette
SetWindowOrgEx
GetTextMetricsA
SetPixelV
GetMapMode
PolylineTo
StretchDIBits
EndDoc
GetWindowOrgEx
Ellipse
FrameRgn
GetDeviceCaps
CreatePolygonRgn
winmm
waveOutRestart
waveInReset
timeGetTime
mixerGetNumDevs
waveInStart
waveOutPause
waveOutUnprepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInClose
waveInOpen
waveOutWrite
waveOutPrepareHeader
waveOutGetDevCapsA
waveInPrepareHeader
advapi32
RegCloseKey
StartServiceCtrlDispatcherA
RegCreateKeyExA
IsValidSid
GetSidSubAuthority
RegQueryValueExA
GetTokenInformation
RegSetValueExA
comdlg32
ReplaceTextW
ChooseFontW
FindTextW
CommDlgExtendedError
user32
GetMessageTime
GetDC
SetForegroundWindow
GetMessagePos
GetMenuItemCount
GetCursorPos
LoadCursorW
GetClipboardData
ShowWindow
MessageBoxW
GetWindowThreadProcessId
wsprintfW
GetDesktopWindow
GetSysColor
GetDoubleClickTime
GetWindowLongW
DestroyIcon
DestroyMenu
SetTimer
SetScrollPos
GetDlgCtrlID
SetCursor
ScreenToClient
SetWindowTextA
TrackPopupMenu
CallNextHookEx
OffsetRect
GetKeyNameTextW
PeekMessageW
IsIconic
GetTopWindow
SystemParametersInfoA
GetFocus
CopyRect
IsMenu
CreateWindowExW
RegisterClassW
UnregisterClassA
DefWindowProcW
GetClientRect
DispatchMessageW
GetWindowRect
AdjustWindowRectEx
CloseClipboard
SetRect
MapDialogRect
SetMenu
SetWindowLongA
IsWindowVisible
OpenClipboard
EqualRect
SystemParametersInfoW
EndDeferWindowPos
GetIconInfo
SetWindowTextW
EndDialog
DrawFocusRect
WindowFromPoint
RegisterClassExW
FrameRect
DragDetect
MoveWindow
KillTimer
SetScrollInfo
MapWindowPoints
GetMenuItemInfoW
InflateRect
GetMenuItemID
SetMenuItemInfoW
TranslateMDISysAccel
DestroyWindow
BeginDeferWindowPos
ReleaseCapture
DestroyAcceleratorTable
LoadIconW
LoadStringW
LoadCursorA
mfc42
ord1576
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 472KB - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ