Static task
static1
Behavioral task
behavioral1
Sample
307a8080514473c58fe174d59dbebb54e35244586d1cf5df592e8c546a6d3fa8.exe
Resource
win7-20220901-en
General
-
Target
307a8080514473c58fe174d59dbebb54e35244586d1cf5df592e8c546a6d3fa8
-
Size
780KB
-
MD5
a00a966079f937e653db69820348f550
-
SHA1
4e53ba456353a3db7820227c0740a98a59ac0d1c
-
SHA256
307a8080514473c58fe174d59dbebb54e35244586d1cf5df592e8c546a6d3fa8
-
SHA512
779804914ca498c89ff06dfd895617ebbef2f2ef6913d93220837f8bc2c301e66c4ce1a39086ba8c361412ccb7b3379111196330d2c568552c53310a5d8f8a92
-
SSDEEP
6144:3m+lqsev9MpQSFx+SsTekHeuBD7I/TUXPgAcMHrc5T0ypn9BYUCGepjvy5/CD5Hc:3mn8QSFxVsEfAXPLHrqJ5sUMY/CNHc
Malware Config
Signatures
Files
-
307a8080514473c58fe174d59dbebb54e35244586d1cf5df592e8c546a6d3fa8.exe windows x86
f879a8d2c11674a6dd0fca0465234284
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
KillTimer
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA
IsWindow
SendMessageA
CreateWindowExA
DestroyWindow
LoadIconA
LoadCursorA
RegisterClassExA
SetWindowTextA
SetTimer
ShowWindow
FindWindowA
LoadStringA
PostMessageA
winspool.drv
EnumJobsA
OpenPrinterA
SetJobA
GetJobA
GetPrinterDriverDirectoryA
GetPrinterDataA
ClosePrinter
kernel32
FatalAppExitA
GetSystemTimeAsFileTime
QueryPerformanceCounter
lstrcpynA
GetModuleFileNameA
GetModuleHandleA
GetLastError
ExpandEnvironmentStringsA
ProcessIdToSessionId
GetCurrentProcessId
CloseHandle
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
CreateMutexA
OpenMutexA
FormatMessageA
DeleteFileA
GetWindowsDirectoryA
GetTickCount
VirtualAlloc
GetConsoleCP
GetFileSize
CreateFileA
GetLocalTime
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
GetProcAddress
GetVersionExA
LoadLibraryA
FreeLibrary
OutputDebugStringA
PeekNamedPipe
ReadFile
LocalFree
GetUserDefaultLangID
WriteFile
HeapReAlloc
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
SetEnvironmentVariableA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetTimeZoneInformation
CreateFileW
SetEndOfFile
CompareStringA
CompareStringW
SetFilePointer
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
ExitProcess
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
GetACP
GetOEMCP
IsValidCodePage
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
gdi32
GetStockObject
advapi32
RegEnumValueA
SetKernelObjectSecurity
GetSecurityDescriptorDacl
SetSecurityInfo
InitializeAcl
AddAccessAllowedAce
IsValidSid
GetLengthSid
GetAce
AllocateAndInitializeSid
FreeSid
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegFlushKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 584KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE