Static task
static1
Behavioral task
behavioral1
Sample
03ecd6d6b5c36092ae9a3329bce749bc3a0ce463bc68b62166dde661002654c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03ecd6d6b5c36092ae9a3329bce749bc3a0ce463bc68b62166dde661002654c7.exe
Resource
win10v2004-20220901-en
General
-
Target
03ecd6d6b5c36092ae9a3329bce749bc3a0ce463bc68b62166dde661002654c7
-
Size
440KB
-
MD5
a1d18de54dc0d0eca010324d21a4f220
-
SHA1
9b504cc08cf00b7cc5858dd700a051b32f08eb1d
-
SHA256
03ecd6d6b5c36092ae9a3329bce749bc3a0ce463bc68b62166dde661002654c7
-
SHA512
18150c38e996b87911fb1e52c1c7ab2f03071abb3f2493e5c9fe4957aa7a2c93c617bca3e3fd28027d81d65a7066a1ff71c04b455d43cb413b28a6ce3ce24b21
-
SSDEEP
6144:aFoS3vucFvIL6ZuOJgU7chJA4G7Kf04FTjhDHdjCFQ420yYra96tKB0zqNk9NcRg:aTWOILEdgUi9G7q1tR2F7M6h0Y
Malware Config
Signatures
Files
-
03ecd6d6b5c36092ae9a3329bce749bc3a0ce463bc68b62166dde661002654c7.exe windows x86
5c09e4ff5dd98d9592b7c166104336c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
WaitForSingleObject
SetProcessAffinityMask
HeapAlloc
LeaveCriticalSection
GetSystemInfo
LockResource
GetLastError
LocalFree
WriteFile
GetCurrentProcessId
FormatMessageW
HeapFree
Sleep
CreateProcessW
GetTempFileNameA
GetWindowsDirectoryW
GetVolumeInformationA
CreateToolhelp32Snapshot
ReadFile
GetCurrentProcess
GetFileTime
QueryPerformanceCounter
GetTickCount
GetFileSize
Process32FirstW
GetModuleFileNameA
GetVersionExA
QueryPerformanceFrequency
Process32NextW
GetTempPathA
SetErrorMode
CreateProcessA
GetExitCodeThread
CreateThread
CreateEventW
TerminateThread
SetEvent
GetModuleFileNameW
WaitForMultipleObjects
GetCurrentThreadId
GetProcessHeap
CloseHandle
GetPriorityClass
LoadResource
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
SizeofResource
EnterCriticalSection
lstrlenW
SetFileTime
WideCharToMultiByte
FindResourceW
CreateFileW
MultiByteToWideChar
GetSystemDirectoryA
FindResourceExW
FlushFileBuffers
SetEndOfFile
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetConsoleMode
GetConsoleCP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
SetFilePointer
GetExitCodeProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
SetStdHandle
HeapDestroy
HeapSize
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
RaiseException
InterlockedIncrement
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
VirtualQuery
GetSystemTimeAsFileTime
DeleteFileW
GetLocalTime
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetFileAttributesW
HeapCreate
VirtualFree
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetOEMCP
IsValidCodePage
GetFileAttributesA
SetHandleCount
GetFileType
advapi32
StartServiceW
QueryServiceStatusEx
OpenSCManagerW
CloseServiceHandle
CreateServiceW
ChangeServiceConfig2W
RegisterServiceCtrlHandlerW
SetServiceStatus
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
StartServiceCtrlDispatcherW
ole32
CLSIDFromProgID
CoUninitialize
CoCreateInstance
CoInitialize
StringFromCLSID
ws2_32
WSACreateEvent
closesocket
WSAEventSelect
WSAGetLastError
WSARecv
WSAStartup
WSAResetEvent
WSASend
WSAConnect
WSAEnumNetworkEvents
WSACloseEvent
WSASetEvent
getaddrinfo
WSAGetOverlappedResult
gethostbyname
freeaddrinfo
WSASetLastError
WSASocketW
WSACleanup
user32
UnregisterClassA
Sections
.text Size: 352KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ