Static task
static1
Behavioral task
behavioral1
Sample
b67516fa0b5cdcc12540dfb5101447824f883faaaa87e7b530362670aaf48324.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b67516fa0b5cdcc12540dfb5101447824f883faaaa87e7b530362670aaf48324.exe
Resource
win10v2004-20220812-en
General
-
Target
b67516fa0b5cdcc12540dfb5101447824f883faaaa87e7b530362670aaf48324
-
Size
184KB
-
MD5
a0ac3653bed3f3fc18a0555e5493aae0
-
SHA1
b0fed9656dedd4ca7bcb25643db716f34309140d
-
SHA256
b67516fa0b5cdcc12540dfb5101447824f883faaaa87e7b530362670aaf48324
-
SHA512
a6c2b160313cc456e72679bff220cc27569401716f9350723fb2f4945eb2e5c87f97854c2c5d78335a6da993919f58640aed423cd1a4dacc1a95061359d1c479
-
SSDEEP
3072:kNfNFoA6q3dgUm6eQzPDZ4NvcZq5ou7I3n0T7yw9YCalu4:sUnceqN4Zb780T7yIVX4
Malware Config
Signatures
Files
-
b67516fa0b5cdcc12540dfb5101447824f883faaaa87e7b530362670aaf48324.exe windows x86
12a99dfc0e49078780b42e734b2fa413
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
acrodistdll
_DistBeginFileJob@16
_DistCancelJob@0
_DistInitialize@36
_DistMain@16
_DistTerminate@0
kernel32
lstrcpyA
lstrcatA
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetProfileStringA
FindClose
FindFirstFileA
GetFileAttributesA
GetTickCount
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetConsoleCtrlHandler
CloseHandle
GetLocaleInfoW
GetTimeZoneInformation
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
WideCharToMultiByte
GetModuleHandleA
GetShortPathNameA
MultiByteToWideChar
lstrlenW
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
lstrcmpiA
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
SetLastError
GetLastError
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
SetStdHandle
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetFilePointer
SetUnhandledExceptionFilter
HeapSize
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
HeapFree
HeapAlloc
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
WriteFile
user32
MessageBoxA
GetForegroundWindow
PostMessageA
PostThreadMessageA
DispatchMessageA
GetMessageA
wsprintfA
LoadStringA
TranslateMessage
CharNextA
advapi32
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
DeregisterEventSource
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
StartServiceCtrlDispatcherA
ControlService
DeleteService
CreateServiceA
RegQueryInfoKeyA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegisterEventSourceA
ReportEventA
RegCloseKey
ole32
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
oleaut32
VariantInit
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
UnRegisterTypeLi
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
VariantClear
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE