Static task
static1
Behavioral task
behavioral1
Sample
62fbb633f17fc8768cd900234dc229c699b3b8f98b9b36a4b69fc485a6b207be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
62fbb633f17fc8768cd900234dc229c699b3b8f98b9b36a4b69fc485a6b207be.exe
Resource
win10v2004-20220812-en
General
-
Target
62fbb633f17fc8768cd900234dc229c699b3b8f98b9b36a4b69fc485a6b207be
-
Size
184KB
-
MD5
34baa314f88b08c9f1c33ea7a4c2cbc0
-
SHA1
d58f3a5ab1d8a6141acf4b945602b8a1654bc166
-
SHA256
62fbb633f17fc8768cd900234dc229c699b3b8f98b9b36a4b69fc485a6b207be
-
SHA512
b9e46aa139443b0d592e110df35763fbfd2bd52c4e8e9a0615788b37ff8d0dec3adc07b911ea1f1e5ee5ba47e1420444ea28dac33dbb45b2080ce3d8a745f717
-
SSDEEP
3072:wD/FZoX/PonlMMCyI5ybMJGl72JXhvIftvdqDuITb:kzpDoJe2rwRdqDL
Malware Config
Signatures
Files
-
62fbb633f17fc8768cd900234dc229c699b3b8f98b9b36a4b69fc485a6b207be.exe windows x86
851fcb28dd5c2141d6a42f1194760a31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
InitializeSid
GetSidLengthRequired
GetSidSubAuthority
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegFlushKey
RegCreateKeyExW
RegCreateKeyW
RegOpenKeyW
kernel32
GetModuleHandleW
SetProcessShutdownParameters
GetCurrentProcessId
ProcessIdToSessionId
GetCommandLineA
GetVersionExA
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
OutputDebugStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
WTSGetActiveConsoleSessionId
LoadLibraryExA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
Sleep
HeapSetInformation
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VirtualProtect
GetSystemInfo
VirtualQuery
CreateFileA
FlushFileBuffers
LocalAlloc
LocalFree
InterlockedCompareExchange
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
WaitForMultipleObjects
CreateSemaphoreW
ReleaseSemaphore
CreateThread
GetModuleHandleExW
SwitchToThread
OpenThread
FreeLibraryAndExitThread
GetProcessId
GetSystemDirectoryW
QueryFullProcessImageNameW
VirtualAlloc
lstrcmpW
OpenProcess
HeapSize
RaiseException
GetVersionExW
CreateMutexW
GetLastError
CloseHandle
CompareStringW
ntdll
NtQueryInformationProcess
RtlUnwind
wtsapi32
WTSFreeMemory
WTSDisconnectSession
WTSLogoffSession
WTSQuerySessionInformationW
slc
SLGetWindowsInformationDWORD
user32
DispatchMessageW
PeekMessageW
DefWindowProcW
RegisterClassExW
GetClassInfoExW
SetTimer
KillTimer
PostThreadMessageW
PostMessageW
SetWindowLongW
GetWindowLongW
LoadCursorW
SendNotifyMessageW
RegisterWindowMessageW
GetWindowThreadProcessId
IsWindow
SetWindowPos
DestroyIcon
CopyImage
GetIconInfo
EnumDisplayDevicesW
DestroyWindow
MsgWaitForMultipleObjectsEx
GetSystemMetrics
CreateWindowExW
UnregisterClassW
shlwapi
PathCombineW
ord9
ord8
shell32
ShellExecuteExW
rpcrt4
RpcStringFreeW
RpcImpersonateClient
RpcServerInqCallAttributesW
RpcServerInqBindingHandle
RpcStringBindingParseW
RpcBindingToStringBindingW
RpcServerListen
RpcMgmtWaitServerListen
RpcServerRegisterIfEx
RpcServerUseProtseqEpW
NdrServerCall2
RpcRevertToSelf
gdi32
DeleteObject
DeleteDC
GetDIBits
CreateDCW
ExtEscape
GetObjectW
CreateCompatibleDC
SelectObject
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE