Static task
static1
Behavioral task
behavioral1
Sample
d3d12b471180f4f32789b48429358dd63d502d0f585e30a88add6122ae6c02aa.exe
Resource
win7-20220718-en
General
-
Target
d3d12b471180f4f32789b48429358dd63d502d0f585e30a88add6122ae6c02aa
-
Size
1.9MB
-
MD5
278077d8bb6e66ab2cd7bf2162d097e4
-
SHA1
53092c67e92298d671642690e550daa22ad901d0
-
SHA256
d3d12b471180f4f32789b48429358dd63d502d0f585e30a88add6122ae6c02aa
-
SHA512
ed535972a260c5a9d48e27e70b0ca8c6f5c4b1c3ae41fd1d98238d1a4ca77dd97ecec3c19e14402e2db2f9e8122c01ff1a6fae58d7c6a90d158d3c21393413a1
-
SSDEEP
49152:uWlUpl0Z7YvhL4kUJU4/1G/aqQf1sVSNA622nQKA+cHxSDd:uYfYLiUs4SpGVanA+MxSDd
Malware Config
Signatures
Files
-
d3d12b471180f4f32789b48429358dd63d502d0f585e30a88add6122ae6c02aa.exe windows x86
802f6df0bf1d19f728e1d4d843622ef3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetSystemTime
GetWindowsDirectoryW
VirtualProtect
GetSystemInfo
LockResource
GetTempPathW
CreateFileW
GetModuleFileNameW
GetVersionExW
Sleep
OpenProcess
GetModuleHandleW
QueryPerformanceCounter
FindResourceW
GetDateFormatW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
user32
SetClipboardData
SendMessageW
CheckRadioButton
SendDlgItemMessageW
GetClipboardData
SetForegroundWindow
DestroyWindow
comctl32
CreateToolbarEx
ImageList_LoadImageW
ord17
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_Destroy
CreateStatusWindowW
ole32
OleInitialize
OleUninitialize
CoInitialize
OleCreate
CoRevokeClassObject
CoUninitialize
advapi32
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
ControlService
RegisterServiceCtrlHandlerW
RegOpenKeyExW
FreeSid
SetServiceStatus
AllocateAndInitializeSid
LookupPrivilegeValueW
InitializeSecurityDescriptor
RegQueryValueExW
RegEnumKeyW
GetTokenInformation
StartServiceCtrlDispatcherW
DeleteService
OpenProcessToken
CloseServiceHandle
CreateServiceW
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ