Static task
static1
Behavioral task
behavioral1
Sample
7626e62f1da5af3d215d17c73b3defcc93e30b15b391b59cecb45620f847447a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7626e62f1da5af3d215d17c73b3defcc93e30b15b391b59cecb45620f847447a.exe
Resource
win10v2004-20220901-en
General
-
Target
7626e62f1da5af3d215d17c73b3defcc93e30b15b391b59cecb45620f847447a
-
Size
491KB
-
MD5
834a29674da20047b98f06f46450d550
-
SHA1
c9e00c078081a8f469bc328a653a433807956883
-
SHA256
7626e62f1da5af3d215d17c73b3defcc93e30b15b391b59cecb45620f847447a
-
SHA512
47eabc838689aeed2d6ad19f2731a86ca60f981b76d750000227bff6ea3c62ca9e498d4be5a39de98536bd41ee520f5e3e78707b5217254eb0fac17506571a24
-
SSDEEP
6144:4nncZDBbwj46ATn5gWDYmfulzYlm/7x9KdOtXFSrZOqynxcaEV6br6oDohSDS:4S2ALeW0m2lzL/7x9JtXFeZPOca9bmgu
Malware Config
Signatures
Files
-
7626e62f1da5af3d215d17c73b3defcc93e30b15b391b59cecb45620f847447a.exe windows x86
b22ea3aee4adcab2a9bac37435794d09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
lstrcmpiA
LeaveCriticalSection
EnterCriticalSection
lstrlenA
FindFirstFileA
FindNextFileA
FindClose
GetVersion
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEndOfFile
SetFilePointer
GetDriveTypeA
GetFullPathNameA
GetLocaleInfoA
GetConsoleScreenBufferInfo
GetStdHandle
ReadFile
SetConsoleMode
GetConsoleMode
WideCharToMultiByte
DosDateTimeToFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
SetVolumeLabelA
CreateDirectoryA
DeleteFileA
WriteConsoleW
lstrcpynA
CreateMutexA
InterlockedExchange
WaitForSingleObject
ReleaseMutex
InitializeCriticalSection
GetCurrentProcess
CreateFileA
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
SetFileTime
CloseHandle
InterlockedDecrement
GetCPInfo
GetSystemTimeAsFileTime
MoveFileA
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
SetConsoleCtrlHandler
InterlockedIncrement
SetStdHandle
GetFileType
HeapReAlloc
GetCommandLineA
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
WriteFile
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStartupInfoA
GetTimeZoneInformation
RtlUnwind
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
HeapSize
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableW
user32
OemToCharA
CharToOemA
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetKernelObjectSecurity
SetKernelObjectSecurity
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup
GetSecurityDescriptorControl
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 846KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE