Static task
static1
Behavioral task
behavioral1
Sample
685763bfb3242a46085332f58a2688da9dc010ef763bee0d85fdf6c352e74e00.exe
Resource
win7-20220414-en
General
-
Target
685763bfb3242a46085332f58a2688da9dc010ef763bee0d85fdf6c352e74e00
-
Size
239KB
-
MD5
b85eb78ff5b5fb4dc59e93cdddba5887
-
SHA1
5c394dad9178bfac80ad28395dcc82527ee66304
-
SHA256
685763bfb3242a46085332f58a2688da9dc010ef763bee0d85fdf6c352e74e00
-
SHA512
8b1be038685714807d179e55ad328f85ddb80168ffb3ca2ff8ed596e7a2520fa842005d2bef73a0cf8e25f577e90eba5c87cb7f90b49001eb7e0b13a029489eb
-
SSDEEP
6144:nCm2RYdkaFx0pOF4/1nT5tvjjnFJuFUnnjiGfu6m:Cwdk+Q/B/3koGGBm
Malware Config
Signatures
Files
-
685763bfb3242a46085332f58a2688da9dc010ef763bee0d85fdf6c352e74e00.exe windows x86
411d9af2813423233964473591a2187e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapSize
GetProcessHeap
FlushFileBuffers
GetFileType
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
MoveFileW
GetStringTypeW
GetSystemTimeAsFileTime
LCMapStringW
TlsGetValue
LocalFree
VirtualProtectEx
FindNextChangeNotification
GetSystemInfo
CloseHandle
TlsAlloc
FormatMessageW
Sleep
CreateEventW
FindFirstChangeNotificationW
GetSystemDirectoryW
LocalAlloc
FindClose
GetEnvironmentVariableW
InitializeCriticalSection
GetModuleFileNameW
RemoveDirectoryW
GetCPInfo
SetSystemPowerState
GetCommandLineW
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetLastError
RaiseException
InitializeCriticalSectionAndSpinCount
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
SetLastError
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetVolumeInformationW
user32
GetWindowTextW
ReleaseDC
UpdateWindow
GetClassInfoExW
GetWindowLongW
DefWindowProcW
GetMessagePos
GetDC
EnumChildWindows
CallNextHookEx
ShowWindow
GetAsyncKeyState
EnumWindows
FindWindowW
GetClassNameW
DrawTextW
comctl32
CreateToolbarEx
CreateStatusWindowW
ImageList_SetOverlayImage
PropertySheetW
DestroyPropertySheetPage
ord17
comdlg32
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW
ole32
OleCreate
CoUninitialize
OleInitialize
CoInitialize
advapi32
RegCloseKey
LookupPrivilegeValueW
SetSecurityDescriptorDacl
SystemFunction036
RegEnumKeyW
QueryServiceStatus
SetSecurityDescriptorOwner
OpenSCManagerW
AllocateAndInitializeSid
SetServiceStatus
RegCreateKeyExW
RegisterServiceCtrlHandlerW
RegSetValueExW
OpenProcessToken
FreeSid
InitializeSecurityDescriptor
RegOpenKeyExW
StartServiceCtrlDispatcherW
OpenServiceW
OpenThreadToken
RegOpenKeyW
RegQueryValueExW
SetSecurityDescriptorGroup
Sections
.text Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ