Static task
static1
Behavioral task
behavioral1
Sample
608c97227f4b369fdaa92d7014638fea3e6bbd8f87a320b78db0435d000bbd72.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
608c97227f4b369fdaa92d7014638fea3e6bbd8f87a320b78db0435d000bbd72.exe
Resource
win10v2004-20220812-en
General
-
Target
608c97227f4b369fdaa92d7014638fea3e6bbd8f87a320b78db0435d000bbd72
-
Size
551KB
-
MD5
656561c7ac63a4522c5c4d685918eed0
-
SHA1
7c76dec256095e7787ff95b202113874a326fee4
-
SHA256
608c97227f4b369fdaa92d7014638fea3e6bbd8f87a320b78db0435d000bbd72
-
SHA512
5493e902422710b52bdb1c2950a4bc390a8504a6295f17c2051a1ed2f4d46b47576ddd05f95597761ae8d569bf81447720504e664a80d0d9fa284c2caf9166ff
-
SSDEEP
12288:vzscJyRx9hXlfCXw+hSV49or9b92ttd+6pSpTYtXyU8:vzscQBs/oV49MO9Kwy
Malware Config
Signatures
Files
-
608c97227f4b369fdaa92d7014638fea3e6bbd8f87a320b78db0435d000bbd72.exe windows x86
b988a1597bb347e9b71c6ff7fa5cd464
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryW
lstrcatW
CreateFileW
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetVersionExA
lstrcpynA
ExpandEnvironmentStringsA
lstrcmpiA
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
lstrlenA
GetShortPathNameA
GetModuleFileNameA
MultiByteToWideChar
WritePrivateProfileStringA
IsDBCSLeadByte
GetLastError
CreateDirectoryA
CloseHandle
CreateFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
lstrcmpA
GetPrivateProfileStringA
CopyFileA
CreateDirectoryExA
GetCurrentProcess
GlobalFree
GlobalAlloc
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
FindClose
FindNextFileA
WriteFile
SetFilePointer
ReadFile
FindFirstFileA
GetWindowsDirectoryA
GetLocalTime
SetEndOfFile
GetFileSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetEnvironmentVariableA
lstrlenW
GetCommandLineW
GetProcessHeap
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetVersionExW
GetLocaleInfoW
CreateFileMappingW
LoadLibraryExW
FindResourceExW
LoadResource
SetLastError
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileIntW
GetPrivateProfileIntA
GetPrivateProfileStringW
GetFullPathNameW
GetFullPathNameA
LoadLibraryExA
GetUserDefaultLCID
LoadLibraryW
GetUserDefaultLangID
GetConsoleMode
GetTempPathA
GetTempFileNameA
FlushFileBuffers
GetFileAttributesW
FindFirstFileW
CreateEventA
CreateThread
SetEvent
FormatMessageW
LocalAlloc
LocalFree
FormatMessageA
GetModuleFileNameW
OutputDebugStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedCompareExchange
InterlockedDecrement
LocalReAlloc
WaitForMultipleObjects
SetEnvironmentVariableW
GetCurrentThread
GetSystemDefaultLangID
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
TerminateThread
AreFileApisANSI
IsBadReadPtr
CreateEventW
GetDateFormatA
GetDateFormatW
GetTimeFormatA
GetTimeFormatW
user32
GetSystemMetrics
GetSysColor
LoadCursorA
GetMessageA
DispatchMessageA
GetActiveWindow
MessageBoxW
PostThreadMessageA
GetParent
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
SendMessageA
PostMessageA
LoadStringW
LoadStringA
CharNextA
GetClassInfoA
RegisterClassA
CreateWindowExA
GetWindowLongA
SetWindowLongA
SetTimer
DefWindowProcA
PostQuitMessage
KillTimer
EnumThreadWindows
IsWindowVisible
GetClassNameA
gdi32
GetStockObject
GetTextMetricsW
GetObjectW
DeleteDC
CreateCompatibleDC
SetBkMode
SetTextColor
DeleteObject
CreateFontIndirectW
SelectObject
msvcrt
__mb_cur_max
_vsnwprintf
_errno
_vsnprintf
memcpy
memmove
malloc
free
mbtowc
isleadbyte
_snprintf
_itoa
wctomb
ferror
_swab
wcsrchr
_itow
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
wcsncmp
_wcsicmp
_wcsnicmp
_iob
memset
_endthread
_beginthread
bsearch
advapi32
RegOpenKeyExW
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteKeyA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
RegSetValueA
RegQueryValueA
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
ImpersonateLoggedOnUser
RegisterEventSourceW
GetUserNameW
LookupAccountNameW
ReportEventW
DeregisterEventSource
IsTextUnicode
RegEnumKeyExA
RegEnumKeyW
GetUserNameA
OpenThreadToken
Sections
.text Size: 493KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ