Static task
static1
Behavioral task
behavioral1
Sample
93ac352128eba3f8cc917eac37c6d7e2398bf96a29670a689ae9d5ba9592ec08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93ac352128eba3f8cc917eac37c6d7e2398bf96a29670a689ae9d5ba9592ec08.exe
Resource
win10v2004-20220812-en
General
-
Target
93ac352128eba3f8cc917eac37c6d7e2398bf96a29670a689ae9d5ba9592ec08
-
Size
144KB
-
MD5
5f3174e60937368000cca1a6de660160
-
SHA1
2b62605fbbcaed2c63804b9706115cfac082a105
-
SHA256
93ac352128eba3f8cc917eac37c6d7e2398bf96a29670a689ae9d5ba9592ec08
-
SHA512
805243c0e77e32b492ad34ffa456d53ecfc8f1cb5d4a5bf04285c670ce6a183992c801b898f442e067114d1bbe60f8679a8f3be0e02f07bc42ab7150083b2938
-
SSDEEP
1536:bk7oNYkwxjEQE+v6Le5pYhOxYTozxm6z1a/I+Uttmd:I7OgD/z1a/FUttmd
Malware Config
Signatures
Files
-
93ac352128eba3f8cc917eac37c6d7e2398bf96a29670a689ae9d5ba9592ec08.exe windows x86
b8077d520cd30b046749e1483d205507
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
CreateThread
ReadFile
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetPrivateProfileIntA
Sleep
GetLocalTime
LoadLibraryA
GetProcAddress
GetFileAttributesA
GetSystemTime
lstrcpyA
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
GetCurrentThreadId
lstrcmpiA
lstrlenA
GetModuleFileNameA
GetCurrentProcess
CloseHandle
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapReAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
CharUpperA
MessageBoxA
TranslateMessage
CharNextA
LoadStringA
UnregisterClassA
PostThreadMessageA
GetMessageA
DispatchMessageA
advapi32
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserA
OpenSCManagerW
ChangeServiceConfigA
ChangeServiceConfig2A
RegEnumKeyExA
RegQueryInfoKeyA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegSetValueExA
ControlService
DeleteService
CreateServiceA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
SetServiceStatus
OpenSCManagerA
OpenServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ole32
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
shell32
SHGetSpecialFolderPathA
oleaut32
VarUI4FromStr
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE