Static task
static1
Behavioral task
behavioral1
Sample
a10f9f955287829f37bb7c680ac2fa4f62b83f0ebac85e4e5689326a185898d9.exe
Resource
win7-20220812-en
General
-
Target
a10f9f955287829f37bb7c680ac2fa4f62b83f0ebac85e4e5689326a185898d9
-
Size
247KB
-
MD5
053c2d7fd6cdb2076001ae8d072e36db
-
SHA1
de9df95520e1d4cc0ed9e50013be0e5af78a3c81
-
SHA256
a10f9f955287829f37bb7c680ac2fa4f62b83f0ebac85e4e5689326a185898d9
-
SHA512
dc18ccee66aa630cf1b9527e2fd5ac85e77c7eacef4d4c4ca407dc54aec2106afb0eef991ce2afb82e81f68d7044dd0c63030797762e227a5600488b4fe87343
-
SSDEEP
3072:pc70/OBahgAY97fAWftcPiYC6cNEVOofgTyzYDbr2s0tXl/7CaxGSEzcJEj98kKb:pcCjh6AW2P06ce9mbrS5lOahsuFa+
Malware Config
Signatures
Files
-
a10f9f955287829f37bb7c680ac2fa4f62b83f0ebac85e4e5689326a185898d9.exe windows x86
8c6f541cc6d716fdaa12addc7a2411b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
SetupDiGetINFClassW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
CM_Get_DevNode_Status
SetupDiChangeState
SetupDiGetDeviceInstanceIdW
SetupDiBuildDriverInfoList
SetupDiSetSelectedDevice
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoList
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiGetDeviceInfoListDetailW
SetupDiGetSelectedDriverW
SetupDiCreateDevRegKeyW
SetupDiCallClassInstaller
SetupDiRegisterDeviceInfo
kernel32
WideCharToMultiByte
LoadLibraryW
GetLastError
FreeLibrary
GetProcAddress
GetSystemDirectoryW
lstrlenW
MultiByteToWideChar
Sleep
GetVersionExW
GetEnvironmentStringsW
FindFirstFileW
LocalFree
FindClose
DeleteFileW
CreateDirectoryW
SetLastError
FindNextFileW
GetTempPathW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
LoadLibraryA
RemoveDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetModuleFileNameA
GetStdHandle
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
GetCurrentThreadId
TlsFree
WriteFile
VirtualAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
EnterCriticalSection
advapi32
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityInfo
GetSecurityDescriptorLength
GetAclInformation
MakeSelfRelativeSD
InitializeAcl
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
GetAce
RegQueryValueExW
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorSacl
LookupAccountNameW
IsValidSid
SetNamedSecurityInfoW
GetLengthSid
AddAce
CopySid
SetSecurityInfo
RegSetValueExW
RegCloseKey
shell32
SHGetFolderPathW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
oleaut32
VarBstrCat
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString
shlwapi
PathAppendW
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ