Static task
static1
Behavioral task
behavioral1
Sample
f47e686dd6a68dcca4c112e9ba9bae01a65dcbfb21db72ddfcceaee0c44e4ad1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f47e686dd6a68dcca4c112e9ba9bae01a65dcbfb21db72ddfcceaee0c44e4ad1.exe
Resource
win10v2004-20220812-en
General
-
Target
f47e686dd6a68dcca4c112e9ba9bae01a65dcbfb21db72ddfcceaee0c44e4ad1
-
Size
308KB
-
MD5
693f237e97645a833a53e1c6ddac53f7
-
SHA1
0fce84521c9823e9f88f951d10e83f41d35e275a
-
SHA256
f47e686dd6a68dcca4c112e9ba9bae01a65dcbfb21db72ddfcceaee0c44e4ad1
-
SHA512
1626389cfa6ae20dd018e15a6afb90def6b51e25c243cb9cf781897c06e898ffbeaac8e4e006495789302d60de444182947ffef46e005a3dabf7b1f090f4fa2a
-
SSDEEP
6144:mWXe/5YzK0xCl5B7KUjyr1rtBkRWS4oQggCjmiMH7kXHfQw99v:nrK0bUjyr10RWCQggCjm3U9
Malware Config
Signatures
Files
-
f47e686dd6a68dcca4c112e9ba9bae01a65dcbfb21db72ddfcceaee0c44e4ad1.exe windows x86
9c0cec58b4c74659b1c0e5b32d084635
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
InterlockedIncrement
SetEvent
InterlockedDecrement
CloseHandle
CreateEventA
ReleaseMutex
CreateMutexA
GetCommandLineA
InitializeCriticalSection
GetModuleHandleA
WideCharToMultiByte
lstrcpyA
lstrcatA
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
RemoveDirectoryA
DeleteFileA
GetVolumeInformationA
GetWindowsDirectoryA
IsBadReadPtr
ResumeThread
SuspendThread
WaitForSingleObject
GetSystemDirectoryA
MultiByteToWideChar
GetShortPathNameA
lstrlenA
GetVersion
lstrlenW
FreeLibrary
Sleep
LoadLibraryA
GetLastError
HeapDestroy
DeleteCriticalSection
GetProcAddress
RtlUnwind
CreateThread
TerminateProcess
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
TlsGetValue
CompareStringW
CompareStringA
FlushFileBuffers
RaiseException
SetStdHandle
SetEnvironmentVariableA
HeapValidate
IsBadWritePtr
HeapCreate
HeapFree
HeapReAlloc
OutputDebugStringA
WriteFile
GetStdHandle
VirtualFree
TlsAlloc
SetLastError
DebugBreak
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetStartupInfoA
GetLocalTime
SetFilePointer
VirtualAlloc
InterlockedExchange
HeapAlloc
GetSystemTime
TlsSetValue
ExitThread
CreateDirectoryA
GetTimeZoneInformation
user32
GetMessageA
GetClassInfoExA
wsprintfA
CharNextA
PostMessageA
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
DestroyWindow
GetWindowLongA
IsWindow
DefWindowProcA
RegisterClassExA
LoadCursorA
LoadStringA
CreateWindowExA
CallWindowProcA
SetWindowLongA
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
GetUserNameA
RegQueryInfoKeyA
ole32
CoCreateInstance
ProgIDFromCLSID
CreateItemMoniker
StgOpenStorage
StgCreateDocfile
CoRevokeClassObject
CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject
oleaut32
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
CreateErrorInfo
SetErrorInfo
VariantCopy
SysAllocStringLen
VariantInit
VariantClear
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
SysStringLen
LoadRegTypeLi
shfolder
SHGetFolderPathA
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE