Static task
static1
Behavioral task
behavioral1
Sample
4d0396d7923a7bdccac984adf6c725b44ae58e1418daa81d9fd01fcbb658b4e5.exe
Resource
win7-20221111-en
General
-
Target
4d0396d7923a7bdccac984adf6c725b44ae58e1418daa81d9fd01fcbb658b4e5
-
Size
286KB
-
MD5
9ed5d21bbfac7db5c250ad6d15e59d57
-
SHA1
72ff57e684208d64542968f64203bed304522379
-
SHA256
4d0396d7923a7bdccac984adf6c725b44ae58e1418daa81d9fd01fcbb658b4e5
-
SHA512
953ee514e9b558c1dc2212914949e5461bce76ac1bade5ece14540a697b23ed452f4f0aba16c7a2e11278f6e88095f1c3a976e9f2c9b4c69f550fe8373971db3
-
SSDEEP
6144:K0gxemAEsSJ0p5oZWVwQo6LfGoUaPCyUG1sefgWsV1KC:K711Op5oIVwQo69H52eoWsVr
Malware Config
Signatures
Files
-
4d0396d7923a7bdccac984adf6c725b44ae58e1418daa81d9fd01fcbb658b4e5.exe windows x86
55279ca17e13272c06beedb97ac15e0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winscard
SCardControl
user32
UnregisterClassA
LoadIconA
ReleaseDC
GetMenu
SetWindowTextW
GetSubMenu
GetCursorPos
RegisterClassW
ClientToScreen
PtInRect
SetTimer
DestroyIcon
OffsetRect
PostMessageW
LoadStringW
TrackPopupMenu
MoveWindow
MessageBeep
SetWindowPos
SetWindowLongW
SetActiveWindow
DefWindowProcW
GetMenuStringW
CheckMenuItem
GetKeyState
InflateRect
SetCapture
DestroyMenu
CreateWindowExW
GetActiveWindow
GetClientRect
DestroyWindow
DrawFocusRect
ReleaseCapture
CreateWindowExA
SendMessageW
kernel32
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapReAlloc
HeapAlloc
InitializeCriticalSection
LoadLibraryExA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
OutputDebugStringA
Sleep
GetACP
GetCPInfo
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetLocaleInfoW
HeapFree
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetTickCount
GetVersionExA
VirtualAlloc
GetEnvironmentStrings
GetCurrentThread
GetEnvironmentStringsW
GetCommandLineA
IsDebuggerPresent
GetLastError
GetProcAddress
LoadLibraryW
SetHandleCount
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetOEMCP
GetVersionExW
CreateEventW
GetModuleHandleW
VirtualProtect
GetTimeZoneInformation
QueryPerformanceCounter
SetEnvironmentVariableA
CompareStringW
CompareStringA
FreeEnvironmentStringsW
VirtualQuery
RtlUnwind
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetSystemInfo
gdi32
CreatePalette
advapi32
RegCreateKeyExA
ole32
OleCreate
CoUninitialize
CoInitialize
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ