Static task
static1
Behavioral task
behavioral1
Sample
4330bfda9eec337dd8acf0d859bf583a4d97af6a3ec091a7e7110d902dd73c06.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4330bfda9eec337dd8acf0d859bf583a4d97af6a3ec091a7e7110d902dd73c06.exe
Resource
win10v2004-20220414-en
General
-
Target
4330bfda9eec337dd8acf0d859bf583a4d97af6a3ec091a7e7110d902dd73c06
-
Size
421KB
-
MD5
7aee5b9eda40e9acc892db4c3b7c4fb7
-
SHA1
ab4d13b7433856c602eba8f95b3ebbfa32baaa1f
-
SHA256
4330bfda9eec337dd8acf0d859bf583a4d97af6a3ec091a7e7110d902dd73c06
-
SHA512
bfc3a803fd116ec1dddc159084b12534b16617e5e086d9a9f6bf0e0b4b1b574f1daadf64abb341eabbfd5e0a9cc2f1a0d1feef9d6e6cf1ea928f6fe25795483d
-
SSDEEP
6144:oJ+VYjvUD7HwJ6TFnb/ex5V5SveL7bEgOs+YdeqX6WbjFo/o/kfJQUigzR/pI+k:ZdIiT6V5SMHxxpX7xog1zgzROz
Malware Config
Signatures
Files
-
4330bfda9eec337dd8acf0d859bf583a4d97af6a3ec091a7e7110d902dd73c06.exe windows x86
8bdf759519426ffa6010177790abc58c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendNotifyMessageA
SetUserObjectSecurity
msvcrt
_mbsinc
_rmtmp
__dllonexit
_onexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_mbsbtype
rand
advapi32
GetKernelObjectSecurity
GetSecurityDescriptorDacl
DuplicateToken
SetNamedSecurityInfoA
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
FreeSid
IsValidSid
RegQueryValueW
GetSidIdentifierAuthority
LookupPrivilegeValueW
ChangeServiceConfig2W
GetSidLengthRequired
LogonUserA
GetAce
GetLengthSid
OpenThreadToken
LsaQueryInformationPolicy
DeleteService
RegQueryInfoKeyW
AddAce
GetServiceDisplayNameW
RegCreateKeyW
QueryServiceStatus
GetSidSubAuthorityCount
RegRestoreKeyW
CreateServiceW
RegSetValueExW
EnumDependentServicesA
GetUserNameW
SetSecurityDescriptorOwner
SetEntriesInAclW
RegCreateKeyA
SetServiceObjectSecurity
InitiateSystemShutdownA
OpenSCManagerW
ReportEventA
QueryServiceLockStatusW
GetSidSubAuthority
version
VerInstallFileA
gdi32
GetRgnBox
StartPage
CreateICA
SetTextColor
CopyEnhMetaFileA
EnumFontsW
ScaleWindowExtEx
CloseEnhMetaFile
CreatePen
SelectClipRgn
CreateRectRgn
SaveDC
GetTextAlign
StretchBlt
SetTextCharacterExtra
Ellipse
GetTextExtentPoint32A
Polygon
PtVisible
SetPixelFormat
PolyPolyline
SetTextAlign
SetRectRgn
GetGlyphOutlineA
GetTextMetricsA
Polyline
Rectangle
ExtCreatePen
BitBlt
GetWindowOrgEx
GetTextCharsetInfo
EnumFontFamiliesExW
CombineRgn
CreateICW
GdiFlush
GetROP2
SetWindowExtEx
BeginPath
SetROP2
TextOutA
GetPixel
EndDoc
GetSystemPaletteEntries
CreateCompatibleDC
GetClipBox
ExtCreateRegion
ExtTextOutA
GetBrushOrgEx
EqualRgn
OffsetViewportOrgEx
SetViewportExtEx
PlayEnhMetaFile
Arc
EndPage
RectVisible
CreateFontA
GetDeviceCaps
CreateFontIndirectA
StrokePath
GetEnhMetaFileBits
Pie
GetTextColor
OffsetWindowOrgEx
SetViewportOrgEx
CreateRoundRectRgn
CreatePenIndirect
UnrealizeObject
GetCharWidthA
GetWinMetaFileBits
ExtFloodFill
PolyBezierTo
SwapBuffers
LPtoDP
kernel32
GetModuleHandleA
GetProfileStringW
GetUserDefaultLangID
GlobalSize
GetCommMask
GetStartupInfoA
netapi32
NetServerEnum
mpr
WNetCancelConnection2A
WNetAddConnection2A
WNetGetProviderNameA
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ