Static task
static1
Behavioral task
behavioral1
Sample
437437a9e06daf99a9dd2feb5df16edfb774890cb263d5d059e13520b2b80a6a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
437437a9e06daf99a9dd2feb5df16edfb774890cb263d5d059e13520b2b80a6a.exe
Resource
win10v2004-20220812-en
General
-
Target
437437a9e06daf99a9dd2feb5df16edfb774890cb263d5d059e13520b2b80a6a
-
Size
138KB
-
MD5
7432673a33bf95b99a9989b02ee10a68
-
SHA1
f194b9d69182ba39f81daae22dcc0bb5a5e17b7b
-
SHA256
437437a9e06daf99a9dd2feb5df16edfb774890cb263d5d059e13520b2b80a6a
-
SHA512
7d2df952c21ab6716cc82e4b1a490f1fd05cb76b98d354f057bad6087665589fa44e327f19ae25c96ef6b710cf365c5fb3e8170613f18276a1f47e5888b1bce8
-
SSDEEP
3072:oevTC2rE+gONC/Cucx3vDWCog0orPWQIR30NtC:oevTCD+/C/j4rWoVTMR3J
Malware Config
Signatures
Files
-
437437a9e06daf99a9dd2feb5df16edfb774890cb263d5d059e13520b2b80a6a.exe windows x86
1c7a757235115d1c9634fc8ef830ea88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GetWindowsDirectoryW
CreateFileW
GetModuleHandleA
MoveFileExA
GetDateFormatA
FreeResource
FindResourceA
LoadResource
GetVolumeInformationA
QueryPerformanceCounter
GetSystemTime
GetLocalTime
GlobalAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
CreateProcessW
Sleep
GetTickCount
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCommandLineW
GetModuleHandleW
GetProfileStringW
GlobalFree
QueryPerformanceFrequency
GetLocaleInfoW
MulDiv
FlushInstructionCache
OpenProcess
IsBadReadPtr
CreateFileA
GetVersionExW
GetStringTypeA
GetStringTypeW
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
GetOEMCP
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
advapi32
RegOpenKeyExA
OpenSCManagerA
CloseServiceHandle
RegDeleteKeyA
RegCreateKeyExA
QueryServiceStatus
RegOpenKeyA
RegCloseKey
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
CoRegisterClassObject
CoTaskMemFree
CoTaskMemAlloc
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ