Static task
static1
Behavioral task
behavioral1
Sample
72785e2e78470727934fa7d80936567a6cffecc3a005bed62cf68ca43cbb6cb1.exe
Resource
win7-20220901-en
General
-
Target
72785e2e78470727934fa7d80936567a6cffecc3a005bed62cf68ca43cbb6cb1
-
Size
1.3MB
-
MD5
7440c1ca22ee3ba4bb2588a78018f170
-
SHA1
07ab1c96220dccede69586eb66b2e534d624bf2e
-
SHA256
72785e2e78470727934fa7d80936567a6cffecc3a005bed62cf68ca43cbb6cb1
-
SHA512
cc5e3fd5bae01676332c8f8d11c8063d0cc19892317a93c6906cc965a08991bbce4461ff3827c165d7f9ff55a98a6d8c84c8f81435d86db149087213e9924e96
-
SSDEEP
24576:D3aGV+ZyRm+GRVjtNjwcNvl30Ha77XdA8BE0DkeDQ9jY7yA/B7ozRwv:DKGV+kmJLnNvlQOBMeUBY7T7oFm
Malware Config
Signatures
Files
-
72785e2e78470727934fa7d80936567a6cffecc3a005bed62cf68ca43cbb6cb1.exe windows x86
d7d0322307ac29b864ee113a648cc85b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindFirstFileW
FindClose
FindNextFileW
CreateDirectoryW
GetPrivateProfileStringW
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryA
WaitForSingleObject
GetLastError
CloseHandle
GetCurrentProcessId
GetFullPathNameW
CreateMutexW
GetModuleFileNameW
GetCommandLineW
GetEnvironmentVariableW
GetTempFileNameW
GetFileSize
SetFilePointer
SetEndOfFile
GetCurrentProcess
GetModuleHandleExW
GetModuleHandleW
WriteFile
GetCommandLineA
LoadLibraryW
FreeConsole
GetVersionExW
GetFileAttributesW
ReadFile
CreateFileW
lstrlenW
GetTempPathW
GetStdHandle
InitializeCriticalSection
GetLongPathNameW
SetLastError
GetProcAddress
GetModuleFileNameA
GetFileAttributesExW
GetCurrentThreadId
DeleteFileW
LocalFree
GetFullPathNameA
HeapReAlloc
CreateFileA
MapViewOfFile
UnmapViewOfFile
SystemTimeToFileTime
QueryPerformanceCounter
UnlockFile
LockFile
OutputDebugStringW
GetTickCount
UnlockFileEx
GetSystemTimeAsFileTime
FormatMessageA
WideCharToMultiByte
FormatMessageW
HeapDestroy
GetFileAttributesA
HeapCreate
HeapValidate
MultiByteToWideChar
FlushFileBuffers
HeapSize
LockFileEx
GetDiskFreeSpaceW
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
OutputDebugStringA
GetVersionExA
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
ExitProcess
GetModuleHandleA
Sleep
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
GetFileType
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
SetFilePointerEx
SetStdHandle
WriteConsoleW
ReadConsoleW
SetEnvironmentVariableA
advapi32
RegOpenKeyExW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
Sections
.text Size: 861KB - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 85KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uzeqfyz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE