Static task
static1
Behavioral task
behavioral1
Sample
7dee8d0e1f831eebf127aa4f829bfef4b65a1ecdc02d83b6fcf9439370d71747.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7dee8d0e1f831eebf127aa4f829bfef4b65a1ecdc02d83b6fcf9439370d71747.exe
Resource
win10v2004-20220812-en
General
-
Target
7dee8d0e1f831eebf127aa4f829bfef4b65a1ecdc02d83b6fcf9439370d71747
-
Size
278KB
-
MD5
d4d776f948513e6cc73f51209e584369
-
SHA1
ef03ed047bc5aff7db97051eeba65d071c0df4e9
-
SHA256
7dee8d0e1f831eebf127aa4f829bfef4b65a1ecdc02d83b6fcf9439370d71747
-
SHA512
974a1ecfd76999a7e4282f5b87b6eeeedf07b9abb4f74eaaa933d13d8a2c5e80ecd16da1de6e8dc141e8a7f230dff26c709738ab87632af273040074bb7e31b1
-
SSDEEP
6144:vn1t2iSyw4NE8anTUnH0I6YkXR+iBlzH47IMBHIdwpvJQBm4D:v6qw4YnT0yYcv4NHIdwpvSB
Malware Config
Signatures
Files
-
7dee8d0e1f831eebf127aa4f829bfef4b65a1ecdc02d83b6fcf9439370d71747.exe windows x86
fd0dff3e6596ca31b9d339c0fcfd19c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
LogonUserW
LookupPrivilegeNameA
CryptSetProviderW
GetUserNameW
RegReplaceKeyA
RegQueryInfoKeyA
CryptSetKeyParam
RegCreateKeyW
CryptCreateHash
DuplicateTokenEx
wininet
InternetCombineUrlW
FindFirstUrlCacheEntryExW
HttpCheckDavCompliance
InternetGoOnlineA
ShowCertificate
InternetFindNextFileW
GopherGetLocatorTypeW
GopherCreateLocatorA
UrlZonesDetach
FindCloseUrlCache
FindNextUrlCacheEntryExA
InternetSecurityProtocolToStringW
comdlg32
ChooseFontW
GetFileTitleW
GetOpenFileNameW
PageSetupDlgA
ChooseColorW
PrintDlgA
GetFileTitleA
GetSaveFileNameW
LoadAlterBitmap
PrintDlgW
FindTextA
GetOpenFileNameA
ChooseFontA
ChooseColorA
GetSaveFileNameA
PageSetupDlgW
gdi32
PolyPolygon
TextOutA
CreateColorSpaceA
ScaleViewportExtEx
CreateCompatibleDC
EnumFontFamiliesA
EnumICMProfilesA
CreateDIBitmap
ExtTextOutA
SetEnhMetaFileBits
TranslateCharsetInfo
PlayEnhMetaFile
OffsetRgn
CopyMetaFileA
SetPixelFormat
GetColorSpace
DeleteEnhMetaFile
SetMapMode
SetMetaFileBitsEx
GetDIBits
gdiPlaySpoolStream
kernel32
GetTimeZoneInformation
GetThreadPriorityBoost
GetDateFormatA
SetHandleCount
GetEnvironmentVariableW
WriteFile
GetStdHandle
GetModuleHandleA
GetCurrentThreadId
FreeEnvironmentStringsW
GetCurrentProcessId
RtlMoveMemory
GetStringTypeW
IsBadWritePtr
DeleteCriticalSection
LockFileEx
MultiByteToWideChar
GetProcAddress
UnhandledExceptionFilter
GetCurrentProcess
GetLocaleInfoA
GetEnvironmentStrings
SetLastError
GlobalSize
CompareStringW
GetStringTypeA
DeleteFileW
GetOEMCP
TerminateProcess
GetLocaleInfoW
ConnectNamedPipe
VirtualProtect
GetSystemTimeAsFileTime
GetVersionExA
GetTickCount
CompareStringA
GetCurrentThread
DeleteAtom
GetUserDefaultLangID
FindFirstFileExW
GetStartupInfoA
CopyFileA
HeapReAlloc
LCMapStringW
GetCommandLineW
TlsFree
EnterCriticalSection
InitializeCriticalSection
VirtualProtectEx
GetProfileStringA
LoadLibraryA
TlsAlloc
LCMapStringA
GetCPInfo
GetACP
SetEnvironmentVariableA
GetTempFileNameW
GetLastError
WideCharToMultiByte
TlsGetValue
GetNumberFormatW
FindFirstFileExA
GetPrivateProfileSectionW
ExitProcess
GetModuleFileNameW
GetStartupInfoW
VirtualFree
HeapAlloc
GetTimeFormatA
VirtualAlloc
InterlockedExchange
HeapFree
GetEnvironmentStringsW
GetStringTypeExW
LockFile
GetModuleFileNameA
RtlUnwind
IsValidLocale
GetDiskFreeSpaceExW
IsValidCodePage
GetUserDefaultLCID
HeapDestroy
TlsSetValue
GetSystemInfo
HeapSize
QueryPerformanceCounter
GetCommandLineA
FreeEnvironmentStringsA
GetConsoleCursorInfo
EnumSystemLocalesA
VirtualQuery
HeapCreate
GetFileType
LeaveCriticalSection
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ