Static task
static1
Behavioral task
behavioral1
Sample
93406b7b6a8ccb692a935f02809200dfbd38b3d547cefbdf4504abe85817519f.exe
Resource
win7-20220812-en
General
-
Target
93406b7b6a8ccb692a935f02809200dfbd38b3d547cefbdf4504abe85817519f
-
Size
868KB
-
MD5
6f5e72d12625757d621ef391811ffaf2
-
SHA1
39664204019c62e4e1146d85886021ec73119275
-
SHA256
93406b7b6a8ccb692a935f02809200dfbd38b3d547cefbdf4504abe85817519f
-
SHA512
fee10922fb96a60e340168796cd25581c31c5695d8646a365e1be85af61b880b354a2fd29cf0c4a9619a11b9387ab0c95e5ecb93655cfe6e1ff27164862b93fe
-
SSDEEP
12288:z7RUmwrH6kUjIcA+liFwvYSi/KnUs3atuVcB1Q6ylqgMuLK8SB1eSM57k:HRUmgH6kUjZA+r4KnUs3agmBdjM5
Malware Config
Signatures
Files
-
93406b7b6a8ccb692a935f02809200dfbd38b3d547cefbdf4504abe85817519f.exe windows x86
213d47911c81c3b52814353e20325cf6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
FindClose
CopyFileW
GetDiskFreeSpaceExW
LocalAlloc
LocalFree
InterlockedIncrement
InterlockedDecrement
SetEvent
FormatMessageW
lstrlenW
GetLastError
LoadLibraryW
GetProcAddress
FreeLibrary
ReadFile
GetCommandLineW
GetStdHandle
GetVersionExW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
CreateEventW
WaitForMultipleObjects
Sleep
GetLocalTime
SetLastError
lstrlenA
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
WriteConsoleW
SetStdHandle
FindFirstFileW
CreateFileW
CloseHandle
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
InitializeCriticalSectionAndSpinCount
RaiseException
OutputDebugStringW
SetEndOfFile
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
LoadLibraryExW
GetFileType
ReadConsoleW
SetFilePointerEx
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCurrentThreadId
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
ExitProcess
GetModuleHandleExW
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LCMapStringW
advapi32
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptReleaseContext
CryptDestroyHash
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
ole32
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
CoUninitialize
shell32
CommandLineToArgvW
SHGetFolderPathW
SHCreateDirectoryExW
oleaut32
VariantClear
SysAllocString
VariantChangeType
VariantInit
SysFreeString
shlwapi
PathFileExistsW
Sections
.text Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: 508KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE