Static task
static1
Behavioral task
behavioral1
Sample
74092ab32667b33e19e031bbb3d58eec09987c7b10996ace8b2e8c6c220ed78f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
74092ab32667b33e19e031bbb3d58eec09987c7b10996ace8b2e8c6c220ed78f.exe
Resource
win10v2004-20220812-en
General
-
Target
74092ab32667b33e19e031bbb3d58eec09987c7b10996ace8b2e8c6c220ed78f
-
Size
257KB
-
MD5
350b8a38191d50444e63db8af81c2f60
-
SHA1
141b7b1f1e4accc76af093ea35a83abff513cd42
-
SHA256
74092ab32667b33e19e031bbb3d58eec09987c7b10996ace8b2e8c6c220ed78f
-
SHA512
5cc95f765fe6a9122aa4ae5c386b94920068af7b83b995ae64e5ec69b4af17fff4000da378f86efee37a3dafcd6cebf064d8ca1bff811f396e38618b45f89a5d
-
SSDEEP
6144:+JA9DuFFp+35CxvHTaNK9KpC4pUZaiZZ4d:+AuFi35CEo9KI4GZZK
Malware Config
Signatures
Files
-
74092ab32667b33e19e031bbb3d58eec09987c7b10996ace8b2e8c6c220ed78f.exe windows x86
285e832887cc318e29b2c359974aba1f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
powrprof
GetCurrentPowerPolicies
kernel32
GetLastError
GetProcAddress
GetModuleHandleA
lstrlenA
lstrcmpiA
CloseHandle
GetLocaleInfoA
GetUserDefaultUILanguage
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetSystemDirectoryA
FindClose
FindFirstFileA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleW
DeleteFileA
GetVersionExA
CreateProcessA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
DeleteCriticalSection
Sleep
LoadLibraryA
CreateMutexA
GetCurrentThreadId
GetCommandLineA
FreeEnvironmentStringsA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
ReadFile
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
InitializeCriticalSection
RaiseException
FreeEnvironmentStringsW
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
CompareFileTime
InterlockedDecrement
GetSystemPowerStatus
GetEnvironmentStrings
LoadLibraryExA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
WriteFile
ExitProcess
HeapCreate
HeapReAlloc
VirtualFree
QueryPerformanceCounter
GetEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
LocalFree
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
user32
PostThreadMessageA
CharNextW
ChangeDisplaySettingsExA
ChangeDisplaySettingsA
CharNextA
SetTimer
BroadcastSystemMessageA
PostMessageA
RegisterWindowMessageA
EnumDisplaySettingsA
GetMessageA
SendNotifyMessageA
KillTimer
RegisterClassA
CreateWindowExA
EnumDisplayDevicesA
DispatchMessageA
PostQuitMessage
RegisterDeviceNotificationA
DefWindowProcA
FindWindowA
advapi32
RegSetValueExA
RegOpenKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteExA
SHGetFolderPathA
SHCreateDirectoryExA
ole32
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoUninitialize
CoSuspendClassObjects
StringFromGUID2
OleRun
CoInitialize
oleaut32
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysFreeString
SysAllocString
GetErrorInfo
VariantClear
hccutils
LoadSTRING
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE