Static task
static1
Behavioral task
behavioral1
Sample
883f90e5cf501630dd5927bf6a9aaa49136e68990326b48ce30051799ad93263.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
883f90e5cf501630dd5927bf6a9aaa49136e68990326b48ce30051799ad93263.exe
Resource
win10v2004-20220812-en
General
-
Target
883f90e5cf501630dd5927bf6a9aaa49136e68990326b48ce30051799ad93263
-
Size
471KB
-
MD5
0317af5ebb446e409c75183ba6c70050
-
SHA1
0c5fa25cc78733062ace8c8e5cac0f7327163744
-
SHA256
883f90e5cf501630dd5927bf6a9aaa49136e68990326b48ce30051799ad93263
-
SHA512
3be9510f6128c3a5a8c738270d408416262a3ca6308a75eace9dd45adf8566b4beeeea98ec6945aeb08998d7134be14281b985d715d50e6cb540a910a882de85
-
SSDEEP
6144:HYCR8Rz7Z4FCWmf71/p2pN/iR4pehF66OfG:4K8Rz7pW62pg4pev66O
Malware Config
Signatures
Files
-
883f90e5cf501630dd5927bf6a9aaa49136e68990326b48ce30051799ad93263.exe windows x86
2bd3acee4f08a59f93ab911e0cec0ed4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
calloc
_wcslwr
qsort
_vsnwprintf
wcsstr
_dup2
_dup
_open_osfhandle
_close
swscanf
_ultoa
_pipe
_seh_longjmp_unwind
_setmode
wcsncmp
iswxdigit
fflush
exit
_wtol
time
srand
_setjmp3
_wcsdup
__setusermatherr
_errno
iswalpha
malloc
free
printf
rand
swprintf
_iob
fprintf
towlower
realloc
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
fgets
_pclose
memmove
wcschr
iswspace
_tell
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_adjust_fdiv
__p__commode
__p__fmode
_controlfp
__set_app_type
wcsrchr
_except_handler3
wcscpy
wcslen
wcsspn
towupper
advapi32
GetSecurityDescriptorOwner
LookupAccountSidW
CreateProcessAsUserW
RegCreateKeyExW
RegSetValueExW
RegSetValueW
RegDeleteKeyW
RegOpenKeyW
RegDeleteValueW
RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RevertToSelf
SaferIdentifyLevel
SaferComputeTokenFromLevel
SaferCloseLevel
ImpersonateLoggedOnUser
SaferRecordEventLogEntry
GetFileSecurityW
kernel32
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
LoadLibraryExW
CopyFileW
SetFileAttributesW
SetEndOfFile
DeleteFileW
SetFileTime
CreateDirectoryW
FillConsoleOutputAttribute
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
FormatMessageW
DuplicateHandle
FlushFileBuffers
HeapReAlloc
HeapSize
VirtualAlloc
VirtualFree
GetFileAttributesExW
LocalFree
GetDriveTypeW
InitializeCriticalSection
CompareFileTime
GetWindowsDirectoryW
GetConsoleTitleW
GetModuleFileNameW
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
SearchPathW
WriteFile
SetFilePointerEx
GetVolumeInformationW
MoveFileW
SetConsoleTitleW
MoveFileExW
GetFileAttributesW
NeedCurrentDirectoryForExePathW
GetBinaryTypeW
GetCurrentThreadId
CreateProcessW
LoadLibraryW
ReadProcessMemory
SetLastError
SetErrorMode
GetConsoleMode
SetConsoleMode
SetEnvironmentStringsW
SetEnvironmentVariableW
GetDiskFreeSpaceExW
ResumeThread
SetProcessAffinityMask
GetSystemInfo
GetThreadLocale
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CmdBatNotification
GetVDMCurrentDirectories
LocalAlloc
FreeLibrary
InterlockedExchange
LoadLibraryA
SetConsoleCtrlHandler
ReadConsoleW
GetLastError
CloseHandle
SetFilePointer
SetThreadLocale
GetProcAddress
GetModuleHandleW
lstrcmpW
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
ReadFile
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
RaiseException
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
VirtualQuery
FlushConsoleInputBuffer
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
GetDateFormatW
FileTimeToLocalFileTime
GetTimeFormatW
GetLocalTime
GetCommandLineW
GetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
user32
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
mpr
WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE