Static task
static1
Behavioral task
behavioral1
Sample
decb45bbff3619735f715573d6096c162aec67c014561a936f0c0a71e04fc1bb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
decb45bbff3619735f715573d6096c162aec67c014561a936f0c0a71e04fc1bb.exe
Resource
win10v2004-20220901-en
General
-
Target
decb45bbff3619735f715573d6096c162aec67c014561a936f0c0a71e04fc1bb
-
Size
2.3MB
-
MD5
90c5088a6ed4f453260a68fb53a53ca2
-
SHA1
ff7d120d15d2612efc02c020629cff404a70b235
-
SHA256
decb45bbff3619735f715573d6096c162aec67c014561a936f0c0a71e04fc1bb
-
SHA512
9be1b742fe346a9430c85a3aae1c00ec9f0e61881ce619d100533a2a87bdfdaeb01fe22f6bd1662b6496a7ea8e18ea0f0b7f0f01b8e7326f041636e7589cf40c
-
SSDEEP
6144:6YHNNS4aXOxFYuDi8XSW2Uuk7UURyBAumEGWSYkCBStouz4FMxQyg:fnryO8w1wyAURyBLwWfkkzUS1yg
Malware Config
Signatures
Files
-
decb45bbff3619735f715573d6096c162aec67c014561a936f0c0a71e04fc1bb.exe windows x86
69cafb6b3027f76787ae6a9d828c756f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
HeapReAlloc
HeapAlloc
HeapFree
HeapCreate
SetLastError
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetDiskFreeSpaceExW
FindFirstVolumeW
FindVolumeClose
GetVersionExW
FindNextVolumeW
OpenMutexW
CreateMutexW
ReleaseMutex
GetCommandLineW
lstrcmpA
lstrlenA
FileTimeToLocalFileTime
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
FileTimeToSystemTime
FindNextVolumeMountPointW
GetCurrentDirectoryW
FindVolumeMountPointClose
GetLocalTime
OpenProcess
GetDriveTypeW
GetOEMCP
GlobalLock
GlobalUnlock
CreateDirectoryW
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetFileSizeEx
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RtlUnwind
LoadLibraryA
GetVolumeInformationW
SetFileAttributesW
DeleteFileW
SetFileTime
FindNextFileW
FindFirstFileW
FindFirstVolumeMountPointW
FindClose
lstrcmpW
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CreateProcessW
FreeConsole
SetErrorMode
CopyFileW
LoadLibraryW
WriteFile
MoveFileW
GetProcAddress
GetSystemTime
GetCurrentThread
GetTickCount
GetModuleHandleW
SetThreadPriority
SleepEx
MultiByteToWideChar
GetACP
lstrcmpiW
ExitProcess
TerminateProcess
SystemTimeToFileTime
SetUnhandledExceptionFilter
GetLastError
GetCurrentProcess
GetExitCodeThread
ExitThread
Sleep
TerminateThread
CreateThread
WaitForSingleObject
GetModuleFileNameW
lstrcpynW
GetWindowsDirectoryW
GetComputerNameW
OutputDebugStringW
SetFilePointer
GetTempPathW
lstrlenW
lstrcpyW
LocalFree
VirtualAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualFree
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
IsDebuggerPresent
UnhandledExceptionFilter
LCMapStringW
WideCharToMultiByte
LCMapStringA
IsValidCodePage
GetCPInfo
HeapSize
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetStartupInfoA
GetProcessHeap
GetVersionExA
GetCommandLineA
CreateFileW
ReadFile
CloseHandle
lstrcatW
VirtualQuery
user32
wsprintfA
SendMessageW
DestroyWindow
CloseClipboard
OpenClipboard
GetClipboardData
GetForegroundWindow
SetProcessWindowStation
ReleaseDC
wsprintfW
GetKeyboardLayoutNameW
GetDC
IsGUIThread
CloseDesktop
GetWindowRect
GetDesktopWindow
GetThreadDesktop
OpenInputDesktop
OpenWindowStationW
GetUserObjectInformationW
SetThreadDesktop
GetProcessWindowStation
CloseWindowStation
gdi32
BitBlt
DeleteDC
GetDIBits
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
advapi32
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
ChangeServiceConfigW
QueryServiceStatus
LsaQueryInformationPolicy
LsaClose
CryptCreateHash
CryptAcquireContextW
CryptGetHashParam
CryptHashData
CryptReleaseContext
CryptDestroyHash
AddAccessAllowedAce
InitializeAcl
RegDeleteKeyW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyW
RegEnumKeyExW
GetLengthSid
RegOpenKeyExW
RegSetKeySecurity
RegEnumValueW
OpenThreadToken
GetTokenInformation
CheckTokenMembership
GetUserNameW
LookupAccountSidW
OpenSCManagerW
StartServiceW
CloseServiceHandle
OpenServiceW
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
shell32
SHGetSpecialFolderPathW
SHGetFolderPathW
ole32
CoUninitialize
CoTaskMemFree
CoCreateInstance
IIDFromString
CoInitialize
rpcrt4
UuidCreate
UuidToStringW
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
secur32
GetComputerObjectNameW
ws2_32
WSAStartup
WSACleanup
crypt32
CertOpenStore
CertCloseStore
CryptUnprotectData
PFXExportCertStoreEx
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ