Static task
static1
Behavioral task
behavioral1
Sample
4dd222145ab4ddc10a581b3ec0965c58a22f567b8d6d4e541e93511b0c32588d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4dd222145ab4ddc10a581b3ec0965c58a22f567b8d6d4e541e93511b0c32588d.exe
Resource
win10v2004-20220812-en
General
-
Target
4dd222145ab4ddc10a581b3ec0965c58a22f567b8d6d4e541e93511b0c32588d
-
Size
497KB
-
MD5
91a14509cf8a31509d0ae59fbf6a36c0
-
SHA1
4e668967c8495c9bbedf007b3410802dc4f5343c
-
SHA256
4dd222145ab4ddc10a581b3ec0965c58a22f567b8d6d4e541e93511b0c32588d
-
SHA512
69ec0b4355bd2cb9e4fe3a1a5a192cf093e81e464a4fc5d84caf55ab1173415af20f1c243573cc48e6dcc2e2ec0ab294762181750b48c2b44c2cea39f9037e53
-
SSDEEP
6144:SCsNak8/14UrPUsq4dPiVZ5PnZEVBfnfB6YUvIy7VcinnQcLtEVzPrMZlCsHBkPR:Dk8BPE4dP8ZJnZELp7QjnDtYwlHqE7I
Malware Config
Signatures
Files
-
4dd222145ab4ddc10a581b3ec0965c58a22f567b8d6d4e541e93511b0c32588d.exe windows x86
95d418d2395bd04cce45d946a822918b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
powrprof
ReadGlobalPwrPolicy
GetPwrDiskSpindownRange
IsAdminOverrideActive
GetPwrCapabilities
SetActivePwrScheme
GetCurrentPowerPolicies
EnumPwrSchemes
CanUserWritePwrScheme
WriteGlobalPwrPolicy
ValidatePowerPolicies
WritePwrScheme
CallNtPowerInformation
GetActivePwrScheme
DeletePwrScheme
user32
SendDlgItemMessageW
BringWindowToTop
IsDlgButtonChecked
CharPrevW
LoadImageW
RegisterWindowMessageW
ExitWindowsEx
SetWindowTextW
KillTimer
FindWindowW
CheckDlgButton
GetWindowTextW
DialogBoxParamW
SendMessageW
InvalidateRect
SetWindowPos
GetDlgItemTextW
GetWindowLongW
SetWindowLongW
GetDlgItemInt
CheckRadioButton
CallWindowProcW
CharNextW
SetTimer
SystemParametersInfoW
GetDlgItem
EnableWindow
UnregisterDeviceNotification
SetDlgItemTextW
GetParent
WinHelpW
SetDlgItemInt
RegisterDeviceNotificationW
LoadIconW
wsprintfW
ShowWindow
MessageBoxW
GetIconInfo
DestroyWindow
LoadStringW
EndDialog
SetFocus
ntdll
NtPowerInformation
RtlNtStatusToDosError
advapi32
StartServiceW
RegDeleteValueW
RegQueryValueExW
RegEnumValueW
ChangeServiceConfigW
CloseServiceHandle
RegCloseKey
ControlService
QueryServiceStatus
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
OpenSCManagerW
UnlockServiceDatabase
OpenProcessToken
LockServiceDatabase
GetTokenInformation
OpenServiceW
RegOpenKeyExW
AdjustTokenPrivileges
kernel32
GetCurrentProcessId
QueryPerformanceCounter
LoadLibraryA
GetSystemDefaultLangID
GlobalMemoryStatusEx
GetModuleFileNameW
GetProcAddress
GetSystemInfo
SetUnhandledExceptionFilter
LocalAlloc
ExpandEnvironmentStringsW
SetLastError
GetWindowsDirectoryW
lstrcatW
GetCurrentProcess
OutputDebugStringA
GetLastError
GetTickCount
FormatMessageW
lstrcpynW
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetVersionExW
lstrcpyW
GetSystemDirectoryW
GetLocaleInfoW
lstrlenW
lstrcmpiW
GetDiskFreeSpaceW
LocalFree
CloseHandle
FreeLibrary
msvcrt
_itow
wcschr
swscanf
_except_handler3
wcscmp
wcslen
wcscpy
wcscat
_wcsicmp
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
gdi32
GetObjectW
DeleteObject
setupapi
SetupDiChangeState
CM_Get_HW_Prof_Flags_ExW
SetupDiDeleteDeviceInfo
SetupDiSetDeviceInstallParamsW
CM_Get_Hardware_Profile_Info_ExW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiDestroyDeviceInfoList
CM_Get_Device_ID_ExW
SetupDiGetDeviceInstallParamsW
SetupDiCallClassInstaller
shell32
ShellExecuteW
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 431KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ