Behavioral task
behavioral1
Sample
4b792c505b6dedad9f2a21c866212e96ae12c8415e3e9b249fa235e63398c2c8.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
4b792c505b6dedad9f2a21c866212e96ae12c8415e3e9b249fa235e63398c2c8.exe
Resource
win10v2004-20230621-en
General
-
Target
4b792c505b6dedad9f2a21c866212e96ae12c8415e3e9b249fa235e63398c2c8
-
Size
844KB
-
MD5
3dfc20d3780cb61f0654ef3116bdc8bb
-
SHA1
5efe6acfb7e80c23f5734b020578f032342fc77d
-
SHA256
4b792c505b6dedad9f2a21c866212e96ae12c8415e3e9b249fa235e63398c2c8
-
SHA512
227904c9efe3ded15599ab1a555aee56721fc0059a0c8b4c42dee5c8c6208434b4ed72c0d878c98c21fec0695569e98fb99fb4781f88fa3eca7256bb560abd90
-
SSDEEP
12288:gA+QuYAS3W3eV5ZqFfbIKGgiNz4rYL3h+AjZWQcpWFYK9751tjxE88888888888G:gAXuYAS31dSdozV3h+Ajsg97L
Malware Config
Signatures
Files
-
4b792c505b6dedad9f2a21c866212e96ae12c8415e3e9b249fa235e63398c2c8.exe windows x64
98ac29c70e65697dcc8984b912a522a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcAddress
SetErrorMode
GetModuleHandleA
LoadLibraryA
user32
CharNextA
GetClipboardOwner
CharLowerA
GetWindowDC
GetLastActivePopup
CloseDesktop
PaintDesktop
IsCharUpperA
GetClipboardData
IsCharLowerW
GetClipboardViewer
GetProcessWindowStation
IsWindowUnicode
IsClipboardFormatAvailable
LoadIconA
VkKeyScanW
gdi32
FillPath
AbortPath
GetPixelFormat
SwapBuffers
GetBkColor
GetObjectType
DeleteDC
GetBkMode
CreatePatternBrush
GetStretchBltMode
CreateSolidBrush
GetTextAlign
advapi32
RegQueryValueExW
RegOpenKeyA
Sections
.text Size: 781KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data3 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ