Static task
static1
Behavioral task
behavioral1
Sample
91dc3cb67c158bb838f958207a408f8c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
91dc3cb67c158bb838f958207a408f8c.exe
Resource
win10v2004-20220812-en
General
-
Target
91dc3cb67c158bb838f958207a408f8c.exe
-
Size
668KB
-
MD5
91dc3cb67c158bb838f958207a408f8c
-
SHA1
be43bd1e440f91a3094899ae8afdf0c35ef4fa9f
-
SHA256
98bfd496fb7ac51b9c39229fd50656da7960009ddaaef4bd9bb179dadcfc174c
-
SHA512
3aa304fd3bd091fab0535031c750a775a88559de36d4215d26a5ec996861d857c236ae7498002b50ec8394450f296747d1a86fca9ef67368a9730c5aac53b3be
-
SSDEEP
12288:CKPN1P4g5optKjDPZvcdJ0JyRxGXxpnXeycupP0VsycN0vHL:nPcdJ0JyRSnNi
Malware Config
Signatures
Files
-
91dc3cb67c158bb838f958207a408f8c.exe.exe windows x86
7950310320cfd81d79c5ad38984d04e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
GetExitCodeThread
Sleep
GetLastError
HeapReAlloc
CloseHandle
RaiseException
CreateThread
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
GetTickCount
GetModuleFileNameA
SetLastError
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetCurrentThreadId
GetModuleHandleA
GetCommandLineA
MultiByteToWideChar
SetEvent
GetProcAddress
GetModuleHandleW
InitializeCriticalSectionEx
CreateEventA
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetCurrentThread
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
WaitForMultipleObjects
VirtualAlloc
HeapFree
WideCharToMultiByte
VirtualProtect
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
VirtualQuery
GetSystemInfo
LoadLibraryExW
FreeLibrary
WriteConsoleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
OutputDebugStringW
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualFree
LoadLibraryExA
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
user32
TranslateMessage
GetParent
UnregisterClassA
GetClientRect
GetDlgItemInt
SetDlgItemTextA
GetMonitorInfoA
MessageBoxA
GetWindowLongA
MapWindowPoints
SetWindowLongA
CharNextA
GetMessageA
EndDialog
DialogBoxParamA
GetActiveWindow
PostThreadMessageA
CharNextW
DispatchMessageA
CharUpperA
GetWindow
GetWindowRect
SetWindowPos
MonitorFromWindow
advapi32
RegDeleteKeyA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
ole32
CoRevokeClassObject
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoAddRefServerProcess
CoReleaseServerProcess
StringFromGUID2
CoUninitialize
CoRegisterClassObject
CoResumeClassObjects
CoInitializeEx
oleaut32
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
SysAllocString
SysStringLen
SafeArrayDestroy
VariantInit
SysFreeString
VariantClear
Sections
.text Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 298KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ