Static task
static1
Behavioral task
behavioral1
Sample
5b56242d5d3dfefaace0d955390c1b623427f0c35085f622e89a24fc2876bb71.exe
Resource
win7-20220718-en
General
-
Target
5b56242d5d3dfefaace0d955390c1b623427f0c35085f622e89a24fc2876bb71
-
Size
648KB
-
MD5
01695efa8036aa3e85a8932330bc3c1a
-
SHA1
dacf399d740b866cbc95c2340ac4fedf8f615645
-
SHA256
5b56242d5d3dfefaace0d955390c1b623427f0c35085f622e89a24fc2876bb71
-
SHA512
ccf2ffda71d16ddd2707a02a07a0842e1ec44156ed90ad59afa7ff0f10f56c70ab678c9e3bcd2470b4718a9fcadcdd367fe8b415e1323d8fa426333319fd1cc2
-
SSDEEP
12288:Ga/7gyCpH2CFCGaRQXB7skZX3b5/PatjUQ9n3WqC4lIEDN69E5p+ZfdwI4qAyTN/:Ga8yUFhaqXFNatQ6nGQIf9YGfdw5055h
Malware Config
Signatures
Files
-
5b56242d5d3dfefaace0d955390c1b623427f0c35085f622e89a24fc2876bb71.exe windows x86
bfc6cde15af1381e31173cf283515468
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommError
GetCommTimeouts
GetSystemTimes
GetNativeSystemInfo
IsProcessorFeaturePresent
DosDateTimeToFileTime
GetSystemTimeAdjustment
PeekNamedPipe
lstrcmpW
lstrcatA
lstrlenA
lstrlenW
_lopen
CreateSemaphoreW
OpenFileMappingW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetCommandLineA
ExpandEnvironmentStringsW
SetFirmwareEnvironmentVariableW
FindResourceW
EnumResourceLanguagesA
FindAtomA
GetDriveTypeA
GetTempPathW
GetTempFileNameW
GetDiskFreeSpaceExA
FindFirstFileExA
UnlockFile
MoveFileExW
CreateHardLinkW
GetVolumeInformationW
IsBadCodePtr
CommConfigDialogA
OpenJobObjectA
FindNextVolumeMountPointA
SetVolumeMountPointW
DeleteVolumeMountPointA
CreateActCtxW
ActivateActCtx
FindActCtxSectionGuid
GetNumaHighestNodeNumber
CompareStringW
SetCalendarInfoW
EnumDateFormatsW
GetSystemDefaultLangID
GetConsoleCursorInfo
WriteConsoleW
GetConsoleAliasW
CloseHandle
SetStdHandle
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
ReleaseSemaphore
LeaveCriticalSection
ResumeThread
SetErrorMode
InterlockedIncrement
SwitchToThread
SetProcessWorkingSetSize
HeapLock
HeapCompact
HeapAlloc
LocalFree
LocalAlloc
GlobalAlloc
GetProcAddress
CopyFileA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineW
GetLastError
HeapFree
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
SetLastError
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetConsoleCP
CreateFileW
user32
PaintDesktop
GetPriorityClipboardFormat
IsDlgButtonChecked
SendMessageA
DispatchMessageW
GetMonitorInfoA
advapi32
AddAccessAllowedAce
QueryServiceLockStatusA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
GetUserNameW
MakeAbsoluteSD
ConvertToAutoInheritPrivateObjectSecurity
FindFirstFreeAce
AddAccessDeniedAce
PrivilegedServiceAuditAlarmW
ObjectCloseAuditAlarmA
AccessCheckByTypeAndAuditAlarmW
ReportEventA
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 532KB - Virtual size: 531KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 11.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jux Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jefe Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ