Static task
static1
Behavioral task
behavioral1
Sample
71df977724eabf73074c61f6acb789eb00729b374a576b4d867d2718f1704ca6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
71df977724eabf73074c61f6acb789eb00729b374a576b4d867d2718f1704ca6.exe
Resource
win10v2004-20220812-en
General
-
Target
71df977724eabf73074c61f6acb789eb00729b374a576b4d867d2718f1704ca6
-
Size
260KB
-
MD5
6cbd6b0a16d8d7a672e340388f63b7f0
-
SHA1
95e0bb3397ab8257756210e379209295a8a71017
-
SHA256
71df977724eabf73074c61f6acb789eb00729b374a576b4d867d2718f1704ca6
-
SHA512
5c33c69783b5ea26549e20521e79f54593d79088bc1fe2a37feb107c92cd9cdbb4bc579e1bf5038625724093c1b50d0f595f20a61ef48fb6418cb2f74bbbe801
-
SSDEEP
6144:jl6z3AnQBC6yK8ea35JFWTmyFxc9yj0kQ0LcxxQ17EY:wz3A6CPeGFWSyFW9aHQ0QxQ2Y
Malware Config
Signatures
Files
-
71df977724eabf73074c61f6acb789eb00729b374a576b4d867d2718f1704ca6.exe windows x86
865a769a67428379e4cac597610f15b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLastError
DeviceIoControl
SetStdHandle
FlushFileBuffers
GetACP
GetCPInfo
GetOEMCP
LCMapStringA
GetStringTypeW
LCMapStringW
MultiByteToWideChar
IsBadCodePtr
GetStringTypeA
SetUnhandledExceptionFilter
IsBadWritePtr
IsBadReadPtr
VirtualFree
HeapCreate
VirtualAlloc
GetFileType
GetStdHandle
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FreeEnvironmentStringsW
FreeEnvironmentStringsA
WideCharToMultiByte
HeapSize
GetCurrentProcess
CloseHandle
MoveFileA
CopyFileA
GetSystemPowerStatus
GetVersionExA
GetSystemTime
OutputDebugStringA
DeleteFileA
GetCurrentThreadId
CreateMutexA
CreateThread
SetEvent
WaitForSingleObject
ReleaseMutex
GetModuleFileNameA
GetTickCount
TerminateProcess
lstrcpyA
GetModuleHandleA
CreateFileA
UnhandledExceptionFilter
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
WaitForMultipleObjects
ResetEvent
CreateProcessA
GetPrivateProfileStringA
GetCommandLineA
SetFilePointer
WriteFile
RtlUnwind
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
user32
BroadcastSystemMessageA
ChangeDisplaySettingsA
EnumDisplaySettingsA
SetTimer
WaitForInputIdle
KillTimer
FindWindowA
MessageBoxA
PostMessageA
ShowWindow
RegisterClassA
CreateWindowExA
DispatchMessageA
GetMessageA
TranslateMessage
DefWindowProcA
IsWindow
DestroyWindow
LoadCursorA
SetWindowPos
GetCursor
RegisterHotKey
SetCursor
UnregisterHotKey
IntersectRect
WindowFromDC
MapWindowPoints
GetSystemMetrics
SystemParametersInfoA
GetWindowRect
gdi32
DeleteDC
GetDeviceCaps
GetClipBox
ExtEscape
CreateDCA
advapi32
OpenServiceA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
RegisterEventSourceA
ReportEventA
DeleteService
CreateServiceA
RegCreateKeyA
OpenSCManagerA
FreeSid
CloseServiceHandle
DeregisterEventSource
GetCurrentHwProfileA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
AllocateAndInitializeSid
RegCreateKeyExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE