Static task
static1
Behavioral task
behavioral1
Sample
f4e303129be3f1f58ea5eb2dc060cbbf5a555c74f09e4ef19644adb7d0fd3ef6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f4e303129be3f1f58ea5eb2dc060cbbf5a555c74f09e4ef19644adb7d0fd3ef6.exe
Resource
win10v2004-20221111-en
General
-
Target
f4e303129be3f1f58ea5eb2dc060cbbf5a555c74f09e4ef19644adb7d0fd3ef6
-
Size
190KB
-
MD5
7bdd0806a91d3f202864817ed27ce163
-
SHA1
a551ab4cfd768fd2f6824e47f307556901b9f0b4
-
SHA256
f4e303129be3f1f58ea5eb2dc060cbbf5a555c74f09e4ef19644adb7d0fd3ef6
-
SHA512
1e9abcd9053dd7e18b9b3c6394e31a74dca39bc69d54eacd20db5c35821fb5b26760a0054ac8285ef8cef7606a48bf3aa6b2841162e6449e479e16b4425736b2
-
SSDEEP
3072:NRRbG0T2diTHlFzfVybKDT1wfbh2R/OQmcFSn8zfgYe4GBsdhVPrD4NcpSLk+GpI:NR/BDlFzvqNo2PcF7etsdhRHhkGSAC
Malware Config
Signatures
Files
-
f4e303129be3f1f58ea5eb2dc060cbbf5a555c74f09e4ef19644adb7d0fd3ef6.exe windows x86
1ce37e01a8aafc1db8ca5c08ac963ff4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
user32
SetCursor
MoveWindow
SetWindowLongA
SetWindowPos
FillRect
GetDlgItem
GetDC
GetWindowInfo
IsWindow
LoadCursorA
ReleaseDC
GetSysColor
ReleaseCapture
GetWindowLongA
SetCapture
gdi32
GetStockObject
DeleteObject
RestoreDC
CreateRectRgn
EnumFontFamiliesExA
CreateFontIndirectA
BitBlt
SaveDC
CreateSolidBrush
TextOutA
SelectObject
Rectangle
DeleteMetaFile
GetTextExtentPoint32A
SetBkMode
SetTextColor
GetDeviceCaps
GetObjectA
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
winmm
mciSendCommandA
sndPlaySoundA
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
SetTapePosition
GetCurrentProcessId
ClearCommError
InterlockedExchange
GetWindowsDirectoryA
GetLocalTime
GetVersion
EnumResourceNamesA
FatalExit
FindClose
Sleep
FindFirstFileA
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA
ole32
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ