Static task
static1
Behavioral task
behavioral1
Sample
29300532b8f8def10ae5d0c35119190ccfbd8430a8847541226c39755db198f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29300532b8f8def10ae5d0c35119190ccfbd8430a8847541226c39755db198f5.exe
Resource
win10v2004-20220812-en
General
-
Target
29300532b8f8def10ae5d0c35119190ccfbd8430a8847541226c39755db198f5
-
Size
137KB
-
MD5
4e7f75b80f856978f2dc66a15a73c9f0
-
SHA1
6e9d46e8514bf35fda3cafd828b37de7885f0166
-
SHA256
29300532b8f8def10ae5d0c35119190ccfbd8430a8847541226c39755db198f5
-
SHA512
9261d39e1abad52e747e94190f63a3a19622a8a23434d6550a6f7ddd2fcef986cac21fe71f54d349b8d54b71b4aa83b2e8ed031a016e6868422bb9dc6d5f795d
-
SSDEEP
3072:47AStOts1l9GsVhzs52/gt9vOw9ku1qAh5npV4+5fiRGiFwGw:47pA+/9GsVhzsM/gfvOw9ku0opV4+5Y+
Malware Config
Signatures
Files
-
29300532b8f8def10ae5d0c35119190ccfbd8430a8847541226c39755db198f5.exe windows x86
54bc4c6d90cf2afa17a1c817d6caf504
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
xlluaruntime
XLLRT_GetEnv
XLLRT_ReleaseEnv
XLLRT_ReleaseRunTime
XLLRT_ReleaseChunk
XLLRT_RunChunk
XLLRT_CreateChunk
XLLRT_CreateRunTime
XLLRT_GetRuntime
XLLRT_CreateEnv
XLLRT_CreateChunkFromFile
libexpat
ord21
ord16
ord25
ord31
ord52
ord18
psapi
GetModuleFileNameExW
imm32
ImmDisableIME
kernel32
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
VirtualFree
InterlockedCompareExchange
InterlockedExchange
Sleep
GetStartupInfoW
HeapFree
VirtualAlloc
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FlushInstructionCache
UnhandledExceptionFilter
SetLastError
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
GetCurrentProcessId
TerminateProcess
LoadLibraryW
CloseHandle
GetLastError
OpenProcess
WideCharToMultiByte
IsBadWritePtr
MultiByteToWideChar
CreateEventW
ResumeThread
WaitForMultipleObjects
SetEvent
OpenFileMappingW
CreateFileMappingW
OpenEventW
ResetEvent
WaitForSingleObject
GetTickCount
MapViewOfFile
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcess
user32
UnregisterClassA
GetDesktopWindow
SendMessageW
CallWindowProcW
GetWindowLongW
PostMessageW
PostThreadMessageW
CreateWindowExW
SetWindowLongW
DestroyWindow
DefWindowProcW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetTimer
LoadCursorW
GetClassInfoExW
RegisterClassExW
CharNextW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
atl90
ord61
ord23
ord64
msvcp90
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
msvcr90
_time64
?what@exception@std@@UBEPBDXZ
vswprintf_s
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
_beginthreadex
??0exception@std@@QAE@XZ
srand
rand
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_except_handler4_common
_amsg_exit
memcpy
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__fmode
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
__p__commode
??3@YAXPAX@Z
_CxxThrowException
??_V@YAXPAX@Z
__CxxFrameHandler3
_wtoi
_recalloc
free
swprintf_s
_purecall
??2@YAPAXI@Z
memmove_s
memset
malloc
strlen
strcmp
_wcsicmp
wcsrchr
realloc
wcslen
_itoa_s
strncpy_s
atoi
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE