Static task
static1
Behavioral task
behavioral1
Sample
f4319cd04c9415e440c741242c96f9a351b6f7e410e620f7a998a0dd1d797f87.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4319cd04c9415e440c741242c96f9a351b6f7e410e620f7a998a0dd1d797f87.exe
Resource
win10v2004-20221111-en
General
-
Target
f4319cd04c9415e440c741242c96f9a351b6f7e410e620f7a998a0dd1d797f87
-
Size
94KB
-
MD5
6cad97841d04e67c7ea9efe0e2ccd5d7
-
SHA1
0f720461a35563d388e9220f67f995ad8d52e2e2
-
SHA256
f4319cd04c9415e440c741242c96f9a351b6f7e410e620f7a998a0dd1d797f87
-
SHA512
d6b7f7373ca1efa638f374d3b974c8ef1473f71b3ed214be0dee274dd546d3c8f856a4effd1cd634aaba1939c56aa72bd74b8a78d8e2f810f3fd71ac6f64c714
-
SSDEEP
1536:awG3X/pgV/GkMoF3OkaMv1SSG3j9P2C3O:t2RgV/G7ohOkaMv1SH
Malware Config
Signatures
Files
-
f4319cd04c9415e440c741242c96f9a351b6f7e410e620f7a998a0dd1d797f87.exe windows x86
47cfcfd7c105b4120fadc4f91dc9a3b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strncpy
strlen
strcpy
strcat
memcmp
sprintf
strcmp
strncmp
fclose
fabs
ceil
malloc
floor
free
memcpy
localtime
mktime
_strnicmp
gmtime
memmove
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetTickCount
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
CreateThread
ResumeThread
SuspendThread
TerminateThread
HeapFree
HeapAlloc
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
PeekNamedPipe
TerminateProcess
GetExitCodeProcess
Sleep
MultiByteToWideChar
WideCharToMultiByte
GlobalLock
GlobalSize
GlobalUnlock
GlobalAlloc
GlobalFree
LoadLibraryA
GetProcAddress
FreeLibrary
SetLastError
TlsAlloc
GetVersionExA
WriteFile
CreateFileA
ReadFile
SetFilePointer
TlsGetValue
TlsSetValue
HeapReAlloc
DeleteCriticalSection
GetLocalTime
WaitForMultipleObjects
GetCurrentThread
CreateSemaphoreA
ReleaseSemaphore
comctl32
InitCommonControls
InitCommonControlsEx
user32
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
EnableWindow
EnumWindows
DestroyWindow
ValidateRect
CallWindowProcA
GetWindowRect
GetParent
MapWindowPoints
InvalidateRect
CreateWindowExA
SetWindowLongA
SendMessageA
GetSysColor
GetSysColorBrush
GetWindowLongA
SetPropA
SetCapture
GetPropA
ReleaseCapture
RemovePropA
GetSystemMetrics
SetCursor
BeginPaint
FillRect
GetWindowTextA
GetClientRect
GetCapture
DrawStateA
EndPaint
DefWindowProcA
UpdateWindow
LoadCursorA
ShowWindow
GetWindowTextLengthA
SetWindowTextA
SetFocus
PeekMessageA
TranslateMessage
DispatchMessageA
MoveWindow
RedrawWindow
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
RegisterClassA
AdjustWindowRectEx
GetActiveWindow
CreateAcceleratorTableA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
SetCursorPos
LoadImageA
SystemParametersInfoA
GetKeyState
PostMessageA
GetCursorPos
GetFocus
EnumChildWindows
DefFrameProcA
IsChild
GetClassNameA
DestroyIcon
gdi32
GetStockObject
SetBkColor
SetTextColor
SelectObject
CreateRectRgnIndirect
SelectClipRgn
DeleteObject
SetBkMode
TextOutA
GetTextExtentPoint32A
CreatePen
MoveToEx
LineTo
CreateSolidBrush
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
BitBlt
CreateBitmap
SetPixel
comdlg32
GetSaveFileNameA
GetOpenFileNameA
oleaut32
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
VariantInit
DispGetParam
VariantClear
ole32
CoInitialize
CreateStreamOnHGlobal
GetHGlobalFromStream
OleInitialize
RevokeDragDrop
shell32
ShellExecuteExA
winmm
timeBeginPeriod
timeEndPeriod
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
Sections
.code Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 734B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ