Static task
static1
Behavioral task
behavioral1
Sample
b558197d8287ef724b6e7af39116450dd2e7bfcfd2b02f6f637fb9f8979aa83c.exe
Resource
win7-20220715-en
General
-
Target
b558197d8287ef724b6e7af39116450dd2e7bfcfd2b02f6f637fb9f8979aa83c
-
Size
1.9MB
-
MD5
fe0dfda0d0a36461e119e26f933fdc2a
-
SHA1
a0214a28a7436eeb7df73f8a76657d33cc78fd34
-
SHA256
b558197d8287ef724b6e7af39116450dd2e7bfcfd2b02f6f637fb9f8979aa83c
-
SHA512
531a5cc0df24666f21d36fbd3bbc9916c5f202cf16707aaea5bcc15302ce1ede564173ce2b657c8a089c00e7f2b27290a5a18928b28728b4ad684656fed14efc
-
SSDEEP
49152:9WlUpl0Z7YvhL4kUJU4/1G/aqQf1sVSNA622nQKA+cHxSDd:9YfYLiUs4SpGVanA+MxSDd
Malware Config
Signatures
Files
-
b558197d8287ef724b6e7af39116450dd2e7bfcfd2b02f6f637fb9f8979aa83c.exe windows x86
802f6df0bf1d19f728e1d4d843622ef3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetSystemTime
GetWindowsDirectoryW
VirtualProtect
GetSystemInfo
LockResource
GetTempPathW
CreateFileW
GetModuleFileNameW
GetVersionExW
Sleep
OpenProcess
GetModuleHandleW
QueryPerformanceCounter
FindResourceW
GetDateFormatW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
user32
SetClipboardData
SendMessageW
CheckRadioButton
SendDlgItemMessageW
GetClipboardData
SetForegroundWindow
DestroyWindow
comctl32
CreateToolbarEx
ImageList_LoadImageW
ord17
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_Destroy
CreateStatusWindowW
ole32
OleInitialize
OleUninitialize
CoInitialize
OleCreate
CoRevokeClassObject
CoUninitialize
advapi32
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
ControlService
RegisterServiceCtrlHandlerW
RegOpenKeyExW
FreeSid
SetServiceStatus
AllocateAndInitializeSid
LookupPrivilegeValueW
InitializeSecurityDescriptor
RegQueryValueExW
RegEnumKeyW
GetTokenInformation
StartServiceCtrlDispatcherW
DeleteService
OpenProcessToken
CloseServiceHandle
CreateServiceW
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ