Static task
static1
Behavioral task
behavioral1
Sample
777b3c9315c90c69ab4c010d7bc19e231f410081318199021208870cd5b3a04c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
777b3c9315c90c69ab4c010d7bc19e231f410081318199021208870cd5b3a04c.exe
Resource
win10v2004-20220812-en
General
-
Target
777b3c9315c90c69ab4c010d7bc19e231f410081318199021208870cd5b3a04c
-
Size
144KB
-
MD5
047a1e349c2911695cc5ec1425a9d9c0
-
SHA1
e0ab1f96ddbf465d919bf20c8addf4d4790eb8d2
-
SHA256
777b3c9315c90c69ab4c010d7bc19e231f410081318199021208870cd5b3a04c
-
SHA512
3cfe9b602ab957544850a553c57ddaed3774714026d83afacb3bf7c9fe3a8a747ab7fd257a6c593d47e3578604ea02ce17d113af81a396201837df2abaf1eee7
-
SSDEEP
3072:RlFBN+CprKTfZutuXBAfu8N+ayfaFG0E3PI5Igdoi:R9werf1ofsrMwmi
Malware Config
Signatures
Files
-
777b3c9315c90c69ab4c010d7bc19e231f410081318199021208870cd5b3a04c.exe windows x86
97d183ecfe4443760a9f4c1a07f4a03e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
TraceMessage
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyExW
CloseTrace
OpenTraceW
ControlTraceW
ProcessTrace
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
kernel32
HeapSetInformation
IsWow64Process
CompareFileTime
GetTickCount
FindFirstFileW
MultiByteToWideChar
GetNativeSystemInfo
K32EnumProcesses
FindNextFileW
FindClose
GetSystemTime
GetSystemTimeAsFileTime
DeleteFileW
MoveFileExW
LocalFree
LocalAlloc
GetFileSizeEx
ReadFile
SetFilePointerEx
GetCurrentProcess
ReleaseMutex
CreateMutexW
CreateFileW
CloseHandle
InterlockedIncrement
InterlockedDecrement
GetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
OutputDebugStringA
GetSystemInfo
WriteFile
HeapFree
GetProcessHeap
SetFilePointer
SetEndOfFile
SystemTimeToFileTime
WideCharToMultiByte
SetLastError
HeapAlloc
msvcrt
_vsnprintf
memcpy_s
swscanf_s
strnlen
iswalpha
??3@YAXPAX@Z
memset
wcsnlen
_controlfp
?terminate@@YAXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_wcsnicmp
_wcsicmp
wcscat_s
wcscpy_s
_vsnwprintf
wcschr
memcpy
_wcslwr_s
??2@YAPAXI@Z
__wgetmainargs
_cexit
_exit
ntdll
NtQueryValueKey
NtSetValueKey
NtOpenKey
RtlComputeCrc32
RtlInitUnicodeString
RtlGUIDFromString
RtlNtStatusToDosError
EtwEventRegister
EtwEventWrite
EtwEventUnregister
NtClose
RtlFreeHeap
RtlAllocateHeap
RtlReAllocateHeap
RtlCompareMemory
WinSqmIsOptedIn
WinSqmGetInstrumentationProperty
NtSetSystemInformation
NtApphelpCacheControl
WinSqmEndSession
WinSqmAddToStreamEx
WinSqmStartSession
RtlRandomEx
EtwTraceMessage
aepic
PicFreeFileInfo
PicRetrieveFileInfo
profapi
ord104
sfc
SfcIsFileProtected
ole32
CoCreateInstance
OleRun
CoInitialize
CoUninitialize
oleaut32
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
grlnrhs Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE