Static task
static1
Behavioral task
behavioral1
Sample
d7a042a5691e4678cf7e2ec1248eb59bb32194409c9a4060f626bcc6e1d58d2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7a042a5691e4678cf7e2ec1248eb59bb32194409c9a4060f626bcc6e1d58d2a.exe
Resource
win10v2004-20220812-en
General
-
Target
d7a042a5691e4678cf7e2ec1248eb59bb32194409c9a4060f626bcc6e1d58d2a
-
Size
276KB
-
MD5
934405b0adc97492fae8aac8158c81b0
-
SHA1
2df3e6a4570d3cc1401fb2edce584b54292834c4
-
SHA256
d7a042a5691e4678cf7e2ec1248eb59bb32194409c9a4060f626bcc6e1d58d2a
-
SHA512
e517108dc6bc555ca2b05fdcf56f801863680838eb9fcd712de05ce1ff7dbabfa18c536b0b63c4d560bc472f6d552bcad7a7016473378730a2c250248f262bb3
-
SSDEEP
6144:TdSxbN/SqWZUO3lxHYbLRt38OvFe+R/W0AAnTQQR9i0j7ZvorGo0:T8KqWOO3lBGL8OvfVTj5voqo
Malware Config
Signatures
Files
-
d7a042a5691e4678cf7e2ec1248eb59bb32194409c9a4060f626bcc6e1d58d2a.exe windows x64
bc87eaa548c74c15e5b9b980aa6d3837
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
kernel32
GetCurrentProcess
GetLastError
SetLastError
CloseHandle
LocalFree
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
VirtualAlloc
VirtualProtect
GetVersionExW
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
HeapFree
HeapAlloc
Sleep
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
ntdll
RtlCaptureContext
RtlVirtualUnwind
RtlNtStatusToDosError
NtSetSystemInformation
RtlLookupFunctionEntry
RtlUnwindEx
shell32
CommandLineToArgvW
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 236KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ