Static task
static1
Behavioral task
behavioral1
Sample
0cbb6f035e327a5456b535418971c2406609eb094ac53f1a8984750897d03642.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0cbb6f035e327a5456b535418971c2406609eb094ac53f1a8984750897d03642.exe
Resource
win10v2004-20220812-en
General
-
Target
0cbb6f035e327a5456b535418971c2406609eb094ac53f1a8984750897d03642
-
Size
748KB
-
MD5
92fb37fa87e7f019af44e857ef6f7c5b
-
SHA1
6247c0a67b4c8491ea59af815748f77fc65b3dc1
-
SHA256
0cbb6f035e327a5456b535418971c2406609eb094ac53f1a8984750897d03642
-
SHA512
4a7bf2af743caf77696fa482a1823be2c8ac60424829a196b797728140ba905fc75915f50304f8532ad90ec91c22fefb4667fa92cb7fa963d0fffbff061e3775
-
SSDEEP
12288:VXLkYq6pF37Gy9DBFCjZtzwb2PvTTGRyrKS6s0VqfsCR:VXIY5F3ScDDCjZtEanTTWBDsJs
Malware Config
Signatures
Files
-
0cbb6f035e327a5456b535418971c2406609eb094ac53f1a8984750897d03642.exe windows x86
a4298e2c9ebec1c96f7904b1f9037a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSQuerySessionInformationA
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
kernel32
GetTickCount
GetTimeFormatW
GetDateFormatW
GetLocalTime
OutputDebugStringA
GetExitCodeProcess
CreateProcessW
GetProcAddress
LoadLibraryW
lstrcpyW
GetFileAttributesW
SetFileAttributesW
CopyFileW
DeleteFileW
GetFileAttributesExW
MoveFileExW
ReadFile
WritePrivateProfileStringW
GetWindowsDirectoryW
GetShortPathNameW
lstrcmpiW
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
LoadLibraryA
GetVersionExW
GetCurrentProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetCurrentProcessId
CreateFileW
WriteFile
SetLastError
GetFileSize
SetFilePointer
SetEndOfFile
GetCommandLineA
SetEvent
CreateEventA
CreateThread
Sleep
GetCurrentThreadId
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
IsDBCSLeadByte
InterlockedDecrement
GetFileType
InterlockedIncrement
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
WriteConsoleW
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetHandleCount
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
HeapCreate
HeapDestroy
VirtualFree
GetStringTypeW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcessHeap
GetStartupInfoA
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
user32
MessageBoxA
PostThreadMessageA
GetMessageA
DispatchMessageA
TranslateMessage
CharUpperA
LoadStringA
CharNextA
UnregisterClassA
advapi32
CreateProcessAsUserW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
GetTokenInformation
DuplicateTokenEx
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
ControlService
DeleteService
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
ole32
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
StringFromGUID2
CoCreateInstance
CoInitializeSecurity
oleaut32
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
VarUI4FromStr
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 500KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE