Static task
static1
Behavioral task
behavioral1
Sample
bce008d6d0e25361fe226b4639a8eb3a34d5f6b32e2e02d9bd39bf5f9f290edc.exe
Resource
win7-20220414-en
General
-
Target
bce008d6d0e25361fe226b4639a8eb3a34d5f6b32e2e02d9bd39bf5f9f290edc
-
Size
445KB
-
MD5
3122a67925ad572803e0259847d79ddb
-
SHA1
5a3c35f0256f95990cf9f7b0b00c176ef67c6a14
-
SHA256
bce008d6d0e25361fe226b4639a8eb3a34d5f6b32e2e02d9bd39bf5f9f290edc
-
SHA512
b77cd92d91c57c1ee3630302036db214ebb879f6a0d446a61202c97abc5669ffcc37892c9b6d0eaf90318aea4efc6cc79b00c07d4ebadd1016ff080d67f997ce
-
SSDEEP
6144:qyFoUL1e6oKI2oyrr8b1VCjgUFcqEmUdlnJ5j:vFo8BoNynKEjgwcqEzv/j
Malware Config
Signatures
Files
-
bce008d6d0e25361fe226b4639a8eb3a34d5f6b32e2e02d9bd39bf5f9f290edc.exe windows x86
41aece3d3f571bc0a19505e2df43ed69
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTokenInformation
RegQueryValueExW
RegOpenKeyW
OpenThreadToken
OpenServiceW
StartServiceCtrlDispatcherW
RegOpenKeyExW
InitializeSecurityDescriptor
FreeSid
OpenProcessToken
RegSetValueExW
RegisterServiceCtrlHandlerW
DeleteService
RegCreateKeyExW
SetEntriesInAclW
AllocateAndInitializeSid
RegDeleteKeyW
OpenSCManagerW
QueryServiceStatus
RegEnumKeyW
RegCloseKey
LookupPrivilegeValueW
kernel32
OpenMutexW
GlobalUnlock
SetUnhandledExceptionFilter
CloseHandle
DecodePointer
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
WriteConsoleW
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
GetProcessHeap
LCMapStringW
GetCurrentDirectoryW
CreateThread
GlobalFree
GlobalAlloc
Sleep
GetSystemDirectoryW
LocalAlloc
GetLocaleInfoW
GetTempPathW
RemoveDirectoryW
VirtualProtect
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapValidate
GetSystemInfo
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
CreateFileW
user32
ReleaseDC
RegisterWindowMessageW
GetWindowLongW
DeferWindowPos
DefWindowProcW
UnregisterHotKey
GetPropW
CreateWindowExW
CallNextHookEx
BeginDeferWindowPos
EnumWindows
TranslateMessage
CreateMenu
GetClassInfoExW
winmm
PlaySoundW
timeBeginPeriod
crypt32
CertVerifyCertificateChainPolicy
CryptHashCertificate
CertStrToNameW
CertFindCertificateInStore
CertFreeCertificateChain
CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetCertificateChain
CryptHashPublicKeyInfo
CertDeleteCertificateFromStore
CertCreateCertificateContext
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1021KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ