?ThrFunc@@YGKPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
acc91677d19bfcd75fe8257525fdf383e28328e31ff5cbac3d1f411b2c3b9aeb.exe
Resource
win7-20220812-en
General
-
Target
acc91677d19bfcd75fe8257525fdf383e28328e31ff5cbac3d1f411b2c3b9aeb
-
Size
129KB
-
MD5
b2a66eefe2dae1ae078ae95710be1ff4
-
SHA1
1d37820ac98d0ed51e8d3624dcd1d5d630a3e576
-
SHA256
acc91677d19bfcd75fe8257525fdf383e28328e31ff5cbac3d1f411b2c3b9aeb
-
SHA512
9dcf8c72de125f1b1a48dd19ea58ee3ff6ed6acf051d99ee3f0293c78a80aa39030ebc381a23c638c3acb06c229a7381b62ffa47b8158999900d9db677637bc9
-
SSDEEP
3072:zA63VIlYXMHjWxVHNN9xjTba7lhva3Q9jKQQ9lh+FK31qKnoJGeA:zA63mbHSxVHNXxjqx1a3ajK+FK31qKoO
Malware Config
Signatures
Files
-
acc91677d19bfcd75fe8257525fdf383e28328e31ff5cbac3d1f411b2c3b9aeb.exe windows x86
31560af941d324e255e781b783fda805
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
LoadLibraryA
CreateFileMappingA
LocalAlloc
LocalFree
CreateThread
lstrcpyA
SwitchToThread
TerminateProcess
Sleep
InitializeCriticalSection
CreateRemoteThread
GetModuleHandleW
WaitForSingleObject
MapViewOfFile
ExitProcess
ntdll
NtSetInformationThread
memset
user32
EmptyClipboard
WindowFromPoint
OpenClipboard
GetActiveWindow
advapi32
FreeSid
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
AllocateAndInitializeSid
SetEntriesInAclW
ole32
CoInitialize
comctl32
ord17
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.core Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ