Static task
static1
Behavioral task
behavioral1
Sample
572cbaf02fe44c2894022a755959b27e6844d41ec9982b7bc5be201df8b310d1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
572cbaf02fe44c2894022a755959b27e6844d41ec9982b7bc5be201df8b310d1.exe
Resource
win10v2004-20220812-en
General
-
Target
572cbaf02fe44c2894022a755959b27e6844d41ec9982b7bc5be201df8b310d1
-
Size
780KB
-
MD5
446a3c4f402a420a18293f348cc1e880
-
SHA1
5c71326d58b782cac65bef90fb80149e082f3d07
-
SHA256
572cbaf02fe44c2894022a755959b27e6844d41ec9982b7bc5be201df8b310d1
-
SHA512
88e3789a3c31142b548a28499b02ef8b54e96e1327720bb76dcf41c68e33483779837f56cc640f9c26049043c3fd484a0b4bf48f959834c103da01561f26fe60
-
SSDEEP
12288:bjo4arSfN3QCj8eRHT2+gKY3ySuxm7TXqxo6PFF9KJX:bMvSfNA6JKcY3rPbq26NFs
Malware Config
Signatures
Files
-
572cbaf02fe44c2894022a755959b27e6844d41ec9982b7bc5be201df8b310d1.exe windows x86
d526248292ff6ea2b4cb9192bc37799f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
CheckTokenMembership
EqualSid
GetAce
GetAclInformation
GetSecurityDescriptorDacl
AdjustTokenPrivileges
LookupPrivilegeValueW
SetNamedSecurityInfoW
GetSecurityDescriptorControl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetFileSecurityW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
CreateProcessAsUserW
DuplicateTokenEx
OpenProcessToken
ConvertStringSidToSidW
RegEnumValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
OpenThreadToken
GetTokenInformation
GetLengthSid
CopySid
LookupAccountNameW
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyW
kernel32
HeapSetInformation
InterlockedExchange
GetExitCodeProcess
LoadLibraryW
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
DeleteFileA
MoveFileA
GetTempPathA
ReadProcessMemory
GetSystemDirectoryA
DeviceIoControl
GetComputerNameW
CreateFileA
FlushFileBuffers
GetFileSize
ReadFile
GetSystemDirectoryW
Sleep
CreateMutexW
OpenMutexW
WaitForSingleObject
ExpandEnvironmentStringsW
LocalAlloc
GetModuleFileNameW
ReleaseMutex
CreateDirectoryW
CreateFileW
WriteFile
SetFileAttributesW
LocalFree
GetFileAttributesW
GetVersionExW
lstrcmpiW
GetSystemTime
SystemTimeToFileTime
GetLastError
CloseHandle
TryEnterCriticalSection
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
HeapSize
VirtualAlloc
HeapReAlloc
FreeLibrary
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetVersion
VirtualProtect
crypt32
CryptUnprotectData
CryptProtectData
wininet
HttpQueryInfoA
InternetCloseHandle
InternetQueryOptionA
HttpEndRequestA
InternetSetOptionW
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestExA
InternetWriteFile
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
wtsapi32
WTSEnumerateSessionsW
WTSQueryUserToken
WTSFreeMemory
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
ole32
StringFromGUID2
CoCreateGuid
CoInitializeEx
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CLSIDFromProgID
oleaut32
SysAllocStringLen
SysStringLen
SysAllocString
VariantClear
VariantInit
SysFreeString
user32
GetSystemMetrics
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE