Static task
static1
Behavioral task
behavioral1
Sample
b7b2b850581614ced6e79e1f569457e94250789aa1eb7a9e12ba8f831e971952.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7b2b850581614ced6e79e1f569457e94250789aa1eb7a9e12ba8f831e971952.exe
Resource
win10v2004-20220812-en
General
-
Target
b7b2b850581614ced6e79e1f569457e94250789aa1eb7a9e12ba8f831e971952
-
Size
372KB
-
MD5
0044b68be7acced84ebe5e530b55bc0d
-
SHA1
8f449cc7e1138b8658b9222fc637d463d5fc1f55
-
SHA256
b7b2b850581614ced6e79e1f569457e94250789aa1eb7a9e12ba8f831e971952
-
SHA512
fe60a6a45b6d3a8aea7056331ba7a34574f9dd752e94f85e3098af7d8d2832df54e1d12b67a372e9f4ce86d79468eb62c6df76b40e32d407c52bce8eeff54e7a
-
SSDEEP
6144:T03xzwtDpxIs/XvRNWIXmgnjRda1OXDMNYNflnLKh9RzGKelG0mkQR3ci:T03CtDpxIsvRwOhDa1OzMKNfazOLsc
Malware Config
Signatures
Files
-
b7b2b850581614ced6e79e1f569457e94250789aa1eb7a9e12ba8f831e971952.exe windows x86
3771c6548d07d3830f2ece88c9bf845b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
MoveFileA
WriteFile
GetFileSize
GetTickCount
CreateFileA
SetFilePointer
FlushFileBuffers
InterlockedDecrement
lstrlenA
InterlockedIncrement
CreateDirectoryA
GetFileAttributesA
Sleep
GetCommandLineA
GetCurrentThreadId
LockResource
LoadResource
SizeofResource
FindResourceA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
FindClose
FindFirstFileA
GetVolumeInformationA
SetFileTime
GetProcAddress
LoadLibraryA
FindNextFileA
lstrcmpA
lstrcatA
lstrcpyA
OpenMutexA
SystemTimeToFileTime
GetSystemTime
SetSystemTime
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
DeviceIoControl
SetEndOfFile
GetLocaleInfoW
SetStdHandle
MultiByteToWideChar
DeleteFileA
CreateProcessA
GetWindowsDirectoryA
GetSystemDirectoryA
CreateEventA
WaitForSingleObject
GetFullPathNameA
CloseHandle
SetFileAttributesA
CopyFileA
MoveFileExA
GetShortPathNameA
WinExec
RaiseException
DeleteCriticalSection
InitializeCriticalSection
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetFileType
CreateFileMappingA
GetEnvironmentVariableA
ExitProcess
RtlUnwind
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
HeapReAlloc
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
ReadFile
GetOEMCP
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
user32
LoadStringA
DefWindowProcA
DestroyWindow
CharNextA
advapi32
RegOpenKeyA
SetSecurityDescriptorDacl
OpenProcessToken
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
OpenSCManagerA
OpenServiceA
ChangeServiceConfigA
StartServiceA
QueryServiceStatus
CloseServiceHandle
RegQueryValueExA
RegCloseKey
GetUserNameA
CreateProcessAsUserA
InitializeSecurityDescriptor
RegQueryInfoKeyA
ole32
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoUninitialize
oleaut32
VarUI4FromStr
setupapi
SetupIterateCabinetA
comctl32
InitCommonControlsEx
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ