Static task
static1
Behavioral task
behavioral1
Sample
c4248438a8a73bf5b3f5a3bc956d13dfc405fe16c570adb3d7646ff5e825eca4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c4248438a8a73bf5b3f5a3bc956d13dfc405fe16c570adb3d7646ff5e825eca4.exe
Resource
win10v2004-20220901-en
General
-
Target
c4248438a8a73bf5b3f5a3bc956d13dfc405fe16c570adb3d7646ff5e825eca4
-
Size
995KB
-
MD5
6f9b40dfc62230d6eeac98b81a69363b
-
SHA1
fedbf842a40578784b298ae3d70d9b7f2321f469
-
SHA256
c4248438a8a73bf5b3f5a3bc956d13dfc405fe16c570adb3d7646ff5e825eca4
-
SHA512
916d07ff6587a4e7145a8938808f7816f39b8621e6791501ba3456985e7f2c51c01aff0dc5a98167dab5797067315b19a96788a626c31dcda63ec745b9aaedaa
-
SSDEEP
24576:8bcvQg2kOUwUY98edKHQkWZkIkQIdIx5w1FGqAE4yc4F6cCbN:8ovQgty98edKHQkWZnkHd+wHGDEDcJf
Malware Config
Signatures
Files
-
c4248438a8a73bf5b3f5a3bc956d13dfc405fe16c570adb3d7646ff5e825eca4.exe windows x86
d7e7b79a18332dbef4135097ca77beff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
BitBlt
SelectObject
DeleteObject
CreateCompatibleDC
GetObjectA
GetStockObject
GetMapMode
SetMapMode
LPtoDP
GetDeviceCaps
CreateCompatibleBitmap
DPtoLP
kernel32
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
TerminateProcess
ContinueDebugEvent
SetThreadContext
GetThreadContext
WaitForDebugEvent
GetStartupInfoA
GetTempPathA
FindNextFileA
FindFirstFileA
CreateThread
TerminateThread
MoveFileA
GetWindowsDirectoryA
CopyFileA
DeleteFileA
SetFileAttributesA
GetModuleFileNameA
GetCommandLineA
CreateMutexA
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
MulDiv
GetExitCodeProcess
GetLastError
WriteFile
CreateFileA
GetSystemTime
SetEvent
GetModuleHandleA
FindClose
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
lstrlenA
Sleep
GetLocalTime
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
ReadFile
FreeLibrary
ResetEvent
Module32First
GetTempFileNameA
FindResourceExA
SizeofResource
LockResource
LoadResource
FindResourceA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RemoveDirectoryA
LocalAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateDirectoryA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetTickCount
CreateEventA
WaitForSingleObject
CloseHandle
CreateProcessA
ReleaseMutex
FreeEnvironmentStringsA
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetFileAttributesA
GetFileType
SetHandleCount
GetCurrentDirectoryA
GetFullPathNameA
GetConsoleMode
GetConsoleCP
GetStdHandle
HeapCreate
VirtualFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetModuleHandleW
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
user32
DispatchMessageA
TranslateMessage
GetMessageA
PostQuitMessage
RegisterClassExA
LoadCursorA
ReleaseDC
DefWindowProcA
CreateIconFromResourceEx
MessageBoxA
CreateWindowExA
UpdateWindow
GetSystemMetrics
GetDC
ShowWindow
PostMessageA
InvalidateRect
SetWindowTextA
GetTitleBarInfo
GetDesktopWindow
GetWindowRect
MoveWindow
SetFocus
BeginPaint
EndPaint
GetWindowDC
advapi32
RegSetValueExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CreateStreamOnHGlobal
shell32
Shell_NotifyIconA
shlwapi
PathFindExtensionA
PathFindExtensionW
gdiplus
GdipGetImageEncoders
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipFree
GdipAlloc
GdipCloneImage
Sections
.text Size: 856KB - Virtual size: 856KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE