Static task
static1
Behavioral task
behavioral1
Sample
daf1d602c3b1463bd8a31d178781b32a546b743e438c9007ab56622f98efce58.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
daf1d602c3b1463bd8a31d178781b32a546b743e438c9007ab56622f98efce58.exe
Resource
win10v2004-20220812-en
General
-
Target
daf1d602c3b1463bd8a31d178781b32a546b743e438c9007ab56622f98efce58
-
Size
61KB
-
MD5
429c0223faa8fddb8d00adad44572840
-
SHA1
1c857398b10eeaa472183cf733105fad32a0ae1d
-
SHA256
daf1d602c3b1463bd8a31d178781b32a546b743e438c9007ab56622f98efce58
-
SHA512
98b1589ff04c5263d60112613e915932392ed6fcdf2e3a90162188f6665449abf266da7ccc2e8d8e3b5908c399d041411ca8bb9317b1d3240104969cf4e98db0
-
SSDEEP
1536:VLI9VM4RI9RKs3KDI5S0rEf9qI2LRnl8q3SaE:xIfMyIpzxEQI2ll8VaE
Malware Config
Signatures
Files
-
daf1d602c3b1463bd8a31d178781b32a546b743e438c9007ab56622f98efce58.exe windows x86
78a2b32d62284f2a7b557c732a93c6f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
CryptReleaseContext
DuplicateTokenEx
CryptCreateHash
RegEnumKeyExA
CryptDestroyHash
CryptGetHashParam
RegSetValueExA
RegCloseKey
CryptAcquireContextW
RegQueryValueExA
user32
LoadCursorA
GetWindowLongA
CloseWindowStation
GetCursorPos
OpenWindowStationA
MsgWaitForMultipleObjects
SendMessageA
SetThreadDesktop
DispatchMessageA
ExitWindowsEx
GetForegroundWindow
DrawIcon
CharLowerBuffA
GetClipboardData
CloseDesktop
GetMessageA
shlwapi
wvnsprintfW
StrCmpNIW
StrStrW
PathRemoveFileSpecW
SHDeleteKeyA
wnsprintfA
PathCombineW
wvnsprintfA
StrCmpNIA
PathFileExistsW
PathFindFileNameW
kernel32
WideCharToMultiByte
GetModuleHandleA
ResetEvent
VirtualProtect
GlobalLock
GetEnvironmentVariableW
lstrcpyA
OpenMutexW
GetSystemTime
FindResourceW
VirtualAlloc
ReleaseMutex
CreateFileA
GetFileAttributesA
GetFileTime
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE