Static task
static1
Behavioral task
behavioral1
Sample
de7ae9e7956fe297bf19b9ffac1aeded91b35c1aad218ce12e261651c3e26976.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de7ae9e7956fe297bf19b9ffac1aeded91b35c1aad218ce12e261651c3e26976.exe
Resource
win10v2004-20220901-en
General
-
Target
de7ae9e7956fe297bf19b9ffac1aeded91b35c1aad218ce12e261651c3e26976
-
Size
97KB
-
MD5
6a20a0bfd01e77daf899ee9849d2cb30
-
SHA1
0e96729bfdd4f79a7197d4db70b0a0fea3140693
-
SHA256
de7ae9e7956fe297bf19b9ffac1aeded91b35c1aad218ce12e261651c3e26976
-
SHA512
096d102aef255e078a8ec1101bcbdd00b0672d618eb33838491c066fa57fae2ecd81d2ddafafafb93f97a0a1b1205adb94ec76713f7bfb25550a230be4a65269
-
SSDEEP
1536:k1Jef09dpN37mLXF4O7Wn8i2O8i2b8i2YW8i2N8i238i2:qnpNrW1RWJxoeqI
Malware Config
Signatures
Files
-
de7ae9e7956fe297bf19b9ffac1aeded91b35c1aad218ce12e261651c3e26976.exe windows x64
fda306c6728182a557e8fb9051cdbdbb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
OpenProcessToken
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegCloseKey
kernel32
GetCurrentProcess
FormatMessageW
lstrlenW
GetLastError
CloseHandle
LocalFree
GetDateFormatW
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetFullPathNameW
GetFileAttributesW
Sleep
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
msvcrt
wcschr
_wcsicmp
towlower
_wcsnicmp
fputs
__iob_func
wcsrchr
fputws
?terminate@@YAXXZ
memset
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
wprintf
??2@YAPEAX_K@Z
towupper
??3@YAXPEAX@Z
iswalpha
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
setupapi
SetupScanFileQueueW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidExW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
CM_Get_DevNode_Status_Ex
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverW
CM_Get_Res_Des_Data_Size_Ex
SetupDiEnumDriverInfoW
CM_Free_Log_Conf_Handle
CM_Get_Device_ID_ExW
CM_Get_Next_Res_Des_Ex
SetupCloseFileQueue
SetupDiGetDriverInstallParamsW
CM_Get_Res_Des_Data_Ex
SetupDiOpenClassRegKeyExW
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupDiDestroyDriverInfoList
CM_Free_Res_Des_Handle
CM_Get_First_Log_Conf_Ex
SetupDiSetDeviceInstallParamsW
SetupDiGetDriverInfoDetailW
SetupDiGetClassDescriptionExW
SetupDiClassGuidsFromNameExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
user32
CharNextW
CharPrevW
LoadStringW
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�# Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ