Static task
static1
Behavioral task
behavioral1
Sample
1ad60c073c7db945a7f45b384d1db1c2c979d67679b0dc71ead2ea2e1e710bc4.exe
Resource
win7-20220812-en
General
-
Target
1ad60c073c7db945a7f45b384d1db1c2c979d67679b0dc71ead2ea2e1e710bc4
-
Size
432KB
-
MD5
5b230885e90771f95baae170dd378756
-
SHA1
8df53eff08df7cf2caf7e7f31b67f9de9fd1ff47
-
SHA256
1ad60c073c7db945a7f45b384d1db1c2c979d67679b0dc71ead2ea2e1e710bc4
-
SHA512
78c10e4210c13731c2f27586d166bfb6ee311d64bc1b57ec46918a412842578e5f4fd378ef02138a0ef1007c2b58ad06cec4de6270c4e19a2571dc7a1ccad8bf
-
SSDEEP
6144:r3o4UFwoNpPhyz8Ojvy6vNqb0Rxtkai32UvW6+y19CNmyd4xu64B100lp:bolaNJXNqbwiPZ19k24
Malware Config
Signatures
Files
-
1ad60c073c7db945a7f45b384d1db1c2c979d67679b0dc71ead2ea2e1e710bc4.exe windows x86
29e515f1b29ab3840a9edd409547868f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareFileTime
CompareStringA
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FindNextFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetExitCodeProcess
GetExitCodeThread
GetFileSize
GetFileTime
GetFileType
GetLocalTime
GetLocaleInfoW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLangID
GetVersionExW
GetVolumeInformationW
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryExW
LocalFree
MapViewOfFile
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WideCharToMultiByte
WriteFile
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenA
lstrlenW
setupapi
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDriverInfoW
SetupDiGetClassDevsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInstallParamsW
SetupDiBuildDriverInfoList
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiSetDeviceInstallParamsW
SetupDiSetSelectedDriverW
SetupFindFirstLineW
SetupGetStringFieldW
SetupOpenFileQueue
SetupOpenInfFileW
SetupScanFileQueueW
SetupCloseInfFile
SetupCloseFileQueue
SetupAddInstallSectionToDiskSpaceListA
CM_Locate_DevNodeW
CM_Get_DevNode_Status
SetupDiInstallDriverFiles
CM_Get_DevNode_Registry_PropertyW
user32
CharUpperA
CharNextW
CharLowerA
BlockInput
ExitWindowsEx
DispatchMessageW
CharUpperW
TranslateMessage
SendMessageW
PostMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetKeyboardType
GetActiveWindow
security
EnumerateSecurityPackagesA
EncryptMessage
DeleteSecurityPackageW
DeleteSecurityPackageA
DeleteSecurityContext
DecryptMessage
CompleteAuthToken
ApplyControlToken
ole32
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoUninitialize
oleaut32
SysAllocString
SysStringLen
VarR8FromI1
VariantClear
VariantInit
SysFreeString
shlwapi
StrToIntExW
StrCmpIW
StrChrW
PathStripToRootW
PathRemoveBackslashW
PathIsUNCW
PathIsRootW
PathIsRelativeW
PathFindExtensionW
PathCompactPathA
StrRChrW
StrStrIW
StrCmpW
UrlGetPartW
version
GetFileVersionInfoW
Sections
.text Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ