Static task
static1
Behavioral task
behavioral1
Sample
2dad729cb3918da836005b6d302bfee7e42be1c4099bfb41537017b500c48300.exe
Resource
win7-20220812-en
General
-
Target
2dad729cb3918da836005b6d302bfee7e42be1c4099bfb41537017b500c48300
-
Size
347KB
-
MD5
6d8e56e6474347ff1139de6c7293fcc6
-
SHA1
5e0f65e7ea2573db710e03e01100f7ec4aa265ed
-
SHA256
2dad729cb3918da836005b6d302bfee7e42be1c4099bfb41537017b500c48300
-
SHA512
beb69f5c4de8f82ff6b32a7cbd88a9e0043a6f9570132fdb7fbb2d5fa070447d8e005438da4ecdd0e453e5ad8a1f3de0d5e07e727f367c84a80c8a89d9135d97
-
SSDEEP
6144:eauDTR8E0LYBFWSBHlmr/MOETsnXL5qp6JJX89l2bC0J:U/0LYBFWSxU/VawQYeT6Ck
Malware Config
Signatures
Files
-
2dad729cb3918da836005b6d302bfee7e42be1c4099bfb41537017b500c48300.exe windows x86
b03431806175ea1d79a32778ec64083a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
lstrlenA
lstrcpyA
lstrcpynW
lstrcatW
lstrlenW
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringW
GetTickCount
GetPrivateProfileIntW
GetPrivateProfileStringW
WriteFile
SetFilePointer
MoveFileW
DeleteFileW
SetFileAttributesW
GetFileSize
LoadLibraryA
GetLocalTime
GetFileAttributesW
WideCharToMultiByte
SetEvent
WaitForMultipleObjectsEx
CreateEventW
GetVersionExW
MultiByteToWideChar
SetUnhandledExceptionFilter
GetCurrentProcess
SuspendThread
RaiseException
FindResourceExW
LoadResource
ReadFile
CreateFileA
LockResource
SizeofResource
FindResourceW
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleFileNameW
GetModuleHandleW
CloseHandle
GetLastError
CreateFileW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OpenEventA
OutputDebugStringA
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
VirtualAlloc
UnmapViewOfFile
GetSystemInfo
MapViewOfFile
CreateFileMappingA
GetCurrentThread
RtlUnwind
HeapValidate
IsBadReadPtr
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetModuleFileNameA
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
DebugBreak
GetStdHandle
WriteConsoleW
GetFileType
ExitProcess
LCMapStringW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
Sleep
user32
IsWindow
GetUserObjectInformationW
OpenInputDesktop
SendMessageW
CharUpperW
CloseDesktop
FindWindowW
advapi32
OpenThreadToken
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
SetThreadToken
RevertToSelf
ole32
StringFromGUID2
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocStringLen
SysAllocString
SysFreeString
VariantClear
shlwapi
PathRemoveExtensionW
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE