Static task
static1
Behavioral task
behavioral1
Sample
265f96b2b27c5c0a9d23d09e5b183a2d9c11375e1f7d0338c7afd3af83130ed1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
265f96b2b27c5c0a9d23d09e5b183a2d9c11375e1f7d0338c7afd3af83130ed1.exe
Resource
win10v2004-20220812-en
General
-
Target
265f96b2b27c5c0a9d23d09e5b183a2d9c11375e1f7d0338c7afd3af83130ed1
-
Size
1.0MB
-
MD5
6d66dab87aea4d620b6e538cbca55dd0
-
SHA1
1f005abdb55fd5cd5a690f72023cf571974bb8ae
-
SHA256
265f96b2b27c5c0a9d23d09e5b183a2d9c11375e1f7d0338c7afd3af83130ed1
-
SHA512
e71d4e706d9430da69635aceeb7d8bd5aec359cfbde46be1141ea143a669f95b9e25088b1867149f78bd7e55c9877cdc5948e31c2967528e62e1b0bd75ec996e
-
SSDEEP
12288:C/SPoO+1aaucoGETfZQwxWzIs6KGrB3Ku73OaKHwuW7:C/SPohqfTiwxtVKuTEHwuW7
Malware Config
Signatures
Files
-
265f96b2b27c5c0a9d23d09e5b183a2d9c11375e1f7d0338c7afd3af83130ed1.exe windows x86
e92450698324a31f9c08c6b3edd36f81
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
EngDeleteSemaphore
GetHFONT
GetPath
PolyPolygon
RemoveFontResourceTracking
GetBrushOrgEx
CreateDIBPatternBrush
SetSystemPaletteUse
kernel32
CreateToolhelp32Snapshot
EndUpdateResourceW
FreeUserPhysicalPages
GetLogicalDrives
GetPrivateProfileStringW
GetVolumeInformationW
QueueUserWorkItem
SetCommBreak
Sleep
VerLanguageNameA
WriteProfileSectionW
_hread
VirtualAlloc
CloseHandle
CompareFileTime
CreateEventW
DebugActiveProcessStop
DeviceIoControl
EnterCriticalSection
FormatMessageW
GetProcAddress
GetProcessHeap
GetSystemTime
HeapFree
InitializeCriticalSection
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
SystemTimeToFileTime
WideCharToMultiByte
lstrlenW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
HeapCompact
HeapCreate
HeapSetInformation
LoadLibraryW
OpenMutexW
ProcessIdToSessionId
QueryPerformanceCounter
ReleaseMutex
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
GetStringTypeW
GetDriveTypeW
GetFullPathNameA
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileExW
HeapAlloc
GetModuleHandleW
ExitProcess
DecodePointer
EncodePointer
SetConsoleCtrlHandler
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
GetCommandLineA
IsProcessorFeaturePresent
GetCurrentDirectoryW
SetCurrentDirectoryW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FatalAppExitA
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
LCMapStringW
GetDriveTypeA
FindFirstFileExA
GetFullPathNameW
GetFileInformationByHandle
PeekNamedPipe
GetFileType
CreateFileW
SetHandleCount
GetStdHandle
HeapDestroy
WriteFile
GetModuleFileNameW
FreeLibrary
InterlockedExchange
GetLocaleInfoW
SetStdHandle
GetConsoleCP
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
WriteConsoleW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
SetFilePointer
SetEndOfFile
ReadFile
GetTimeZoneInformation
HeapSize
HeapReAlloc
FlushFileBuffers
RaiseException
CompareStringW
SetEnvironmentVariableA
ole32
CoUninitialize
CoInitializeSecurity
CoInitialize
PropVariantCopy
PropVariantClear
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstanceEx
ComPs_NdrDllGetClassObject
oleaut32
VARIANT_UserSize
DispGetParam
VarI1FromUI8
VarR4FromR8
LoadRegTypeLi
VarR4FromStr
VarI1FromUI2
rpcrt4
I_RpcAllocate
NdrVaryingArrayFree
RpcBindingSetOption
RpcIfIdVectorFree
NdrRpcSmClientFree
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 538KB - Virtual size: 538KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE