Static task
static1
Behavioral task
behavioral1
Sample
a56719e1d185969aa6d0f00db325300bfc71a9785fccd6a145738c9a362ba6b7.exe
Resource
win7-20220812-en
General
-
Target
a56719e1d185969aa6d0f00db325300bfc71a9785fccd6a145738c9a362ba6b7
-
Size
554KB
-
MD5
492ab1ab3a8b7f3061f8e5aac8d20240
-
SHA1
dc8602a2e3c96b66c05ad8c5c4abca94efba5e01
-
SHA256
a56719e1d185969aa6d0f00db325300bfc71a9785fccd6a145738c9a362ba6b7
-
SHA512
f35f6eb9e9406223fd893eac009c460d7227b49b6f6cb0a280b62e2b9a589c0426d3bee8e18c6984d9d822aea8f33b70ea1bd294377b4dbaa4a1b2186965bcd9
-
SSDEEP
12288:Zg3bpXj1jRNH5wiQwBcjKsRn18zumk9qJlfMIND/C/xvuoV:ZgdXj9jH5cwGjKsNGzmQfMINmp26
Malware Config
Signatures
Files
-
a56719e1d185969aa6d0f00db325300bfc71a9785fccd6a145738c9a362ba6b7.exe windows x86
e46c24de3a569dd442c48dd0aab35e4e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
Sleep
SetConsoleCtrlHandler
LocalFree
FormatMessageW
CreateHardLinkW
CreateFileW
CloseHandle
BackupRead
GetCurrentProcess
BackupSeek
SetFileTime
DeviceIoControl
FindClose
FindFirstFileW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
MoveFileW
GetShortPathNameW
GetLongPathNameW
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetFileTime
ReadFile
GetDriveTypeW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetFileAttributesW
SetFileAttributesW
ExpandEnvironmentStringsW
FindNextFileW
GetVersionExW
GetModuleFileNameW
GetFullPathNameW
SetErrorMode
FreeLibrary
LoadLibraryW
LoadLibraryExW
GetCurrentProcessId
GetCurrentDirectoryW
SetThreadPriority
GetCurrentThread
SetPriorityClass
SetCurrentDirectoryW
GetFullPathNameA
CreateThread
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetProcessAffinityMask
ReleaseSemaphore
ResetEvent
DeleteCriticalSection
SetEvent
InitializeCriticalSection
CreateEventW
CreateSemaphoreW
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
GetCPInfo
GetConsoleOutputCP
CreateFileA
WriteConsoleA
SetEnvironmentVariableA
GetLocaleInfoA
GetStringTypeW
WriteFile
WriteConsoleW
SetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
GetConsoleMode
GetCommandLineW
GetModuleHandleW
GetProcAddress
SetLastError
CompareStringA
GetFileInformationByHandle
GetStringTypeA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
SetStdHandle
GetConsoleCP
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
user32
CharUpperW
CharLowerW
ExitWindowsEx
CharLowerA
LoadStringW
CharToOemBuffW
MessageBeep
CharToOemA
OemToCharBuffA
OemToCharA
CharToOemBuffA
advapi32
RegQueryValueExW
RegCloseKey
SetFileSecurityW
GetFileSecurityW
GetSecurityDescriptorLength
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegOpenKeyExW
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
Sections
.text Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE