Static task
static1
Behavioral task
behavioral1
Sample
7e32c1a618133a57139b0cf3783ca523455d240e394f7ce7e857c8cc61595d92.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e32c1a618133a57139b0cf3783ca523455d240e394f7ce7e857c8cc61595d92.exe
Resource
win10v2004-20220812-en
General
-
Target
7e32c1a618133a57139b0cf3783ca523455d240e394f7ce7e857c8cc61595d92
-
Size
559KB
-
MD5
6ae7257a536874d8873890655ca8e990
-
SHA1
a439e8e90eaffbcd9033fa633f58f8068862f319
-
SHA256
7e32c1a618133a57139b0cf3783ca523455d240e394f7ce7e857c8cc61595d92
-
SHA512
1fcf7ed9664f55ad5cdef786f3a3d63f17fc1fd1bfd1a15a5ddcb68fb6ad22745f96ee1129d8c3c62f6aff793a67a8d36ca21ee9e5060af19ac3c72fabe44e43
-
SSDEEP
12288:P2LADaZ+T6im1sY4FMDhW1y/JeczzDuDY3rskWsntSsPdt:Pp/e9sdqhW1y/JeczuDQrskWsntSob
Malware Config
Signatures
Files
-
7e32c1a618133a57139b0cf3783ca523455d240e394f7ce7e857c8cc61595d92.exe windows x86
5943040c2efb4e218206e244c4537d90
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
SetCurrentDirectoryW
Sleep
GetTempPathW
GetEnvironmentVariableW
GetCommandLineW
GetModuleFileNameW
SetFileAttributesW
WaitForSingleObject
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
TerminateProcess
GetCurrentProcess
FileTimeToSystemTime
WideCharToMultiByte
MultiByteToWideChar
FindClose
FindNextFileW
FindFirstFileW
GetLastError
CreateThread
GetLocalTime
IsWow64Process
GetVersionExW
InterlockedDecrement
Thread32Next
SuspendThread
OpenThread
Thread32First
QueryDosDeviceA
CreateProcessW
lstrlenA
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
HeapSize
GetCurrentDirectoryA
GetFullPathNameA
SetStdHandle
LCMapStringW
LCMapStringA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetModuleFileNameA
VirtualAlloc
VirtualFree
HeapCreate
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualQuery
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FindFirstFileA
GetDriveTypeA
SetFilePointer
GetFileInformationByHandle
FileTimeToLocalFileTime
ExitThread
GetSystemTimeAsFileTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetModuleHandleW
HeapAlloc
HeapFree
DeleteFileW
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
ExpandEnvironmentStringsA
LoadLibraryA
GetProcAddress
FreeLibrary
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
ReadFile
FormatMessageA
SleepEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
iphlpapi
GetAdaptersInfo
shell32
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW
user32
GetCursorPos
SetForegroundWindow
PostQuitMessage
UpdateWindow
TrackPopupMenuEx
ShowWindow
CreateWindowExW
MessageBoxW
RegisterClassExW
DestroyWindow
UnregisterClassW
LoadMenuW
LoadIconW
TranslateMessage
DispatchMessageW
PeekMessageW
GetSubMenu
DefWindowProcW
ws2_32
WSAStartup
WSACleanup
WSAGetLastError
send
setsockopt
getsockname
ntohs
bind
htons
sendto
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
recvfrom
accept
listen
__WSAFDIsSet
select
ioctlsocket
gethostname
recv
WSASetLastError
getsockopt
wldap32
ord301
ord50
ord26
ord60
ord30
ord32
ord35
ord79
ord200
ord143
ord211
ord22
ord46
ord41
ord27
ord33
dbghelp
MiniDumpWriteDump
psapi
GetProcessMemoryInfo
GetProcessImageFileNameA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ole32
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
oleaut32
SysFreeString
VariantClear
SysAllocString
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
Sections
.text Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ