Static task
static1
Behavioral task
behavioral1
Sample
4f08ccf0c0a6462978891d7f02bac8fe5823589243c182a569fab289dbbff490.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f08ccf0c0a6462978891d7f02bac8fe5823589243c182a569fab289dbbff490.exe
Resource
win10v2004-20221111-en
General
-
Target
4f08ccf0c0a6462978891d7f02bac8fe5823589243c182a569fab289dbbff490
-
Size
3.1MB
-
MD5
28a713659abffbcedda2417ccf7e63af
-
SHA1
3e9b2ef5979109d45b8aa0c2241b264556862a0c
-
SHA256
4f08ccf0c0a6462978891d7f02bac8fe5823589243c182a569fab289dbbff490
-
SHA512
211d87339f1d1ef46ad46e88923d39293e6694a44d78f618f72fab340a92975c7a13c83e7a6039732737a728fb4bea6bceed9ff3fa498e3b329063da76d57157
-
SSDEEP
24576:Qr8Svlzo9mFoVA5T91MGeQk+nm4yhnvbErY8nvYCwm4wHSVsDtcfn6MfkIw30Eiv:muck8vYCweC2zml1suwyQlH5+FmI
Malware Config
Signatures
Files
-
4f08ccf0c0a6462978891d7f02bac8fe5823589243c182a569fab289dbbff490.exe windows x86
562e9a027922c49a9564ac1adb820198
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
GetModuleHandleW
GlobalFindAtomW
GlobalAddAtomW
LockResource
LoadResource
GetProcessVersion
GetFileTime
LocalFileTimeToFileTime
SetFileTime
SetErrorMode
GetStartupInfoW
RtlUnwind
CreateThread
ExitThread
SetStdHandle
GetFileType
HeapAlloc
HeapFree
GetSystemTime
GetLocalTime
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
IsBadCodePtr
lstrcatW
GetStringTypeW
GetCurrentDirectoryA
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
GlobalFree
TlsAlloc
GetVersion
lstrcmpiW
GetFullPathNameW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
DuplicateHandle
lstrcpyW
lstrcpynW
SuspendThread
SetThreadPriority
ResumeThread
lstrcmpW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetVolumeLabelW
CreateFileMappingW
GetThreadContext
GetExitCodeThread
TerminateThread
GetDiskFreeSpaceW
GetDriveTypeW
QueryDosDeviceW
GetComputerNameA
OpenSemaphoreW
OpenMutexW
OpenEventW
DeviceIoControl
CreateFileA
GlobalMemoryStatus
GetComputerNameW
LoadLibraryExW
LoadLibraryExA
EnumResourceLanguagesW
SizeofResource
GetSystemDirectoryW
QueryPerformanceCounter
FindResourceExW
GlobalAlloc
GlobalDeleteAtom
FileTimeToLocalFileTime
GlobalLock
GlobalUnlock
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetThreadTimes
FileTimeToSystemTime
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
OutputDebugStringW
CreateProcessW
TerminateProcess
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
SetFileAttributesW
GetLogicalDrives
GetVolumeInformationW
GetModuleHandleA
LocalFree
GetCurrentProcessId
GetCurrentThread
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
SetUnhandledExceptionFilter
GetProcessHeap
SetPriorityClass
IsBadReadPtr
GetFileSize
SetFilePointer
MoveFileW
LoadLibraryW
GetProcessHeaps
HeapLock
HeapWalk
HeapUnlock
SetConsoleTextAttribute
AllocConsole
GetStdHandle
SetConsoleScreenBufferSize
SetConsoleWindowInfo
ReadConsoleA
FreeConsole
GetConsoleScreenBufferInfo
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
SetConsoleCursorPosition
OpenProcess
GetVersionExW
SetLastError
GetProfileStringW
WriteProfileStringW
Sleep
RaiseException
ExitProcess
SetThreadAffinityMask
CreateDirectoryW
GetACP
GetDiskFreeSpaceExW
DeleteFileW
GetFileAttributesW
InterlockedExchangeAdd
FindFirstFileW
FindNextFileW
FindClose
GetTimeZoneInformation
InterlockedDecrement
GetTickCount
GetLastError
CreateMutexW
GetSystemInfo
GetCurrentProcess
GetProcessTimes
ResetEvent
ReleaseMutex
GetSystemTimeAsFileTime
SystemTimeToFileTime
LoadLibraryA
GetProcAddress
GetModuleFileNameW
CreateFileW
ReadFile
SetEvent
CloseHandle
FreeLibrary
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
InterlockedExchange
CreateSemaphoreW
DeleteCriticalSection
InitializeCriticalSection
InterlockedCompareExchange
GetCurrentThreadId
WaitForMultipleObjects
CreateEventW
GetCurrencyFormatW
FormatMessageW
lstrlenW
LocalAlloc
InterlockedIncrement
GetStringTypeA
user32
SetForegroundWindow
RegisterWindowMessageW
SystemParametersInfoW
IsIconic
GetWindowPlacement
ShowWindow
SetWindowPos
SetWindowLongW
GetForegroundWindow
GetDlgItem
GrayStringW
DrawTextW
TabbedTextOutW
GetMessagePos
GetMessageTime
ReleaseDC
CallWindowProcW
GetPropW
SetPropW
CreateWindowExW
DestroyWindow
wsprintfW
PostThreadMessageW
PostMessageW
DefWindowProcW
PostQuitMessage
SendMessageW
SetCursor
EnableWindow
MessageBoxW
GetWindowLongW
IsWindowEnabled
GetLastActivePopup
SetWindowTextW
SetFocus
GetMenu
RegisterClassW
GetClassInfoW
WinHelpW
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
GetWindowTextW
RemovePropW
GetParent
SetWindowsHookExW
GetCursorPos
PeekMessageW
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
GetNextDlgTabItem
GetFocus
ClientToScreen
EnableMenuItem
UnregisterClassW
CharToOemBuffA
OemToCharBuffA
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
LoadBitmapW
GetMenuCheckMarkDimensions
UnhookWindowsHookEx
LoadIconW
LoadCursorW
GetSysColorBrush
DestroyMenu
GetDesktopWindow
CharUpperW
GetSystemMetrics
LoadStringW
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetClassNameW
PtInRect
GetWindowRect
GetDlgCtrlID
GetWindow
GetDC
gdi32
GetObjectW
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateBitmap
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
Escape
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyW
GetAce
LookupAccountNameW
RegisterEventSourceA
ReportEventA
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
ControlService
StartServiceW
QueryServiceStatus
DeleteService
LockServiceDatabase
CreateServiceW
RegCreateKeyW
UnlockServiceDatabase
SetServiceStatus
RegDeleteKeyW
GetUserNameW
SetFileSecurityW
MapGenericMask
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DuplicateToken
AccessCheck
OpenProcessToken
GetTokenInformation
LookupAccountSidW
GetLengthSid
CopySid
RegisterEventSourceW
ReportEventW
DeregisterEventSource
GetFileSecurityW
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
ChangeServiceConfigW
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
comctl32
ord17
ole32
CoUninitialize
CoCreateGuid
CoCreateInstance
OleRun
CoInitializeEx
oleaut32
SysAllocString
GetErrorInfo
SysFreeString
VariantChangeType
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
VariantCopy
SysStringLen
VariantClear
VariantInit
wininet
InternetCloseHandle
InternetReadFile
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetCanonicalizeUrlW
rpcrt4
RpcStringFreeA
UuidToStringA
UuidCreate
ws2_32
WSACleanup
WSARecv
ioctlsocket
WSASend
recv
shutdown
inet_addr
ntohl
gethostbyname
htonl
gethostname
setsockopt
accept
WSAStartup
htons
WSAIoctl
socket
connect
closesocket
listen
recvfrom
sendto
send
getsockopt
getsockname
getpeername
WSAEnumNetworkEvents
WSAEventSelect
bind
WSAGetLastError
ntohs
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 348KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 532KB - Virtual size: 567KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ