Static task
static1
Behavioral task
behavioral1
Sample
f4a57472b291c1d05f0d286943bef6967a55252cb7444fc24cbcded549dd9d62.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f4a57472b291c1d05f0d286943bef6967a55252cb7444fc24cbcded549dd9d62.exe
Resource
win10v2004-20221111-en
General
-
Target
f4a57472b291c1d05f0d286943bef6967a55252cb7444fc24cbcded549dd9d62
-
Size
22KB
-
MD5
a77e598d2f2cbf24dc4b55ffda634485
-
SHA1
405e1a0226a1e421d8a9da733348dd76d70940c6
-
SHA256
f4a57472b291c1d05f0d286943bef6967a55252cb7444fc24cbcded549dd9d62
-
SHA512
afa1874276439a5dbc68d654a20074d835dfff90892a6148bc53fa0eed9da6d855157e4dd25f07dceb4e50d4654ff8d4a76fa458f5e5a8df8e86116d8a6cfac2
-
SSDEEP
384:U3a+gQW4p+Hc0ae1rJr/51S1DlKwBUJeey+Q7cvnO86t2ifEBX9kr+5571voK:UFgQWLcG1rx/51S/2JcIRbifYX9KW57N
Malware Config
Signatures
Files
-
f4a57472b291c1d05f0d286943bef6967a55252cb7444fc24cbcded549dd9d62.exe windows x86
708f5136e75915cec5210de97383ada7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
DeleteDC
GetSystemPaletteEntries
CreateDIBSection
CreateCompatibleDC
SetDIBColorTable
SelectObject
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
mscat32
CryptCATOpen
msvcrt
_initterm
free
_adjust_fdiv
malloc
advapi32
RegCloseKey
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
ddraw
AcquireDDThreadLock
ReleaseDDThreadLock
kernel32
DisableThreadLibraryCalls
InterlockedIncrement
LocalFree
Sleep
GetProfileStringA
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
QueryPerformanceCounter
TerminateProcess
GetModuleFileNameA
GetCurrentProcess
UnhandledExceptionFilter
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
VirtualAlloc
lstrlenA
GetProcAddress
SetUnhandledExceptionFilter
InterlockedDecrement
LoadLibraryA
user32
ReleaseDC
MessageBoxA
wsprintfA
GetDC
ole32
StgSetTimes
IsValidIid
cmdial32
AutoDialFunc
Sections
.text Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE