Static task
static1
Behavioral task
behavioral1
Sample
8c7bbfccbf01b2bd0f58310d8c63dd8d121aea2dbae50e178dd8139e29a9ccad.exe
Resource
win7-20220901-en
General
-
Target
8c7bbfccbf01b2bd0f58310d8c63dd8d121aea2dbae50e178dd8139e29a9ccad
-
Size
126KB
-
MD5
a076304618a5d81676a232342067c085
-
SHA1
dfc8802aaba114e464f50bbbfcefbe2a7f0e390a
-
SHA256
8c7bbfccbf01b2bd0f58310d8c63dd8d121aea2dbae50e178dd8139e29a9ccad
-
SHA512
d25cde32d3401164e3e2ed2c91e9010902964168bc35c937cd8fa3e2448611e2a56f2e30482576b842e33457edcb7afb257f234e113eb627ca43e47aa2870eeb
-
SSDEEP
3072:29zfIhr+/dd+h40EZZlT4HlnEowNn22b:na/ddk4fZrUGoa22
Malware Config
Signatures
Files
-
8c7bbfccbf01b2bd0f58310d8c63dd8d121aea2dbae50e178dd8139e29a9ccad.exe windows x86
05b8c06fd2a2a4354e012d1e4422bfc8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
WriteFile
lstrcmpW
LocalFree
lstrlenW
VirtualAlloc
VirtualFree
LocalAlloc
LoadLibraryA
HeapDestroy
HeapCreate
GlobalUnlock
GlobalSize
GlobalLock
ExitProcess
SetHandleCount
GlobalFree
GlobalAlloc
GetStdHandle
GetProcAddress
GetLocaleInfoW
GetLastError
GetFileType
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
lstrcpyW
user32
LoadCursorA
LoadIconA
MessageBoxA
LoadStringA
ExitWindowsEx
CharPrevA
CharNextA
gdi32
GetStockObject
advapi32
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
AdjustTokenPrivileges
RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
Sections
.textR Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ