Static task
static1
Behavioral task
behavioral1
Sample
76f3f0392518c0f8c2ad13d892716fc4459182f25b7ec5d62e9c401a32c5a21a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76f3f0392518c0f8c2ad13d892716fc4459182f25b7ec5d62e9c401a32c5a21a.exe
Resource
win10v2004-20220812-en
General
-
Target
76f3f0392518c0f8c2ad13d892716fc4459182f25b7ec5d62e9c401a32c5a21a
-
Size
3.0MB
-
MD5
624bba92de39d4b8c4b5f7df01380124
-
SHA1
d0355f5bdfbc56a3a1a7943496c6d0cb71c15961
-
SHA256
76f3f0392518c0f8c2ad13d892716fc4459182f25b7ec5d62e9c401a32c5a21a
-
SHA512
efa294adc37ec303168442b4d43a880219535436882b1169001fade99e5e9f491bea8e64f27021ef0d47241a14bbf757e8eaf46fc67a089354e1f79a679bc528
-
SSDEEP
49152:rD8OzVQ5HI+3KN/qjq57TVqDtPEC5Qw0fp9a0dPsewVpVOUk6of7dQf:rD8O8o5h0q57pqDC00dPvwVpJmhQf
Malware Config
Signatures
Files
-
76f3f0392518c0f8c2ad13d892716fc4459182f25b7ec5d62e9c401a32c5a21a.exe windows x86
fd396c7734e9bd698de39daa4c929934
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateTimerQueue
GetCurrentProcess
LocalAlloc
GetCurrentThread
LocalFree
GetSystemWindowsDirectoryW
QueryDosDeviceW
FindFirstFileW
SetPriorityClass
FindNextFileW
TerminateProcess
RemoveDirectoryW
FindClose
GetVersionExW
K32GetProcessImageFileNameW
DuplicateHandle
CreateToolhelp32Snapshot
GetExitCodeThread
Process32NextW
Process32FirstW
GetNativeSystemInfo
LoadLibraryW
Module32FirstW
GetWindowsDirectoryW
GetProcAddress
GetCurrentProcessId
CreateProcessW
GetModuleHandleW
WideCharToMultiByte
CreateRemoteThread
Module32NextW
K32GetMappedFileNameW
CreateFileMappingW
GetTickCount
lstrcmpW
IsWow64Process
VirtualQueryEx
InitializeCriticalSectionEx
RaiseException
DecodePointer
GetComputerNameExW
GlobalMemoryStatusEx
GetStdHandle
GetEnvironmentVariableW
GetFileType
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
QueryPerformanceCounter
GetSystemTimeAsFileTime
FormatMessageW
DeleteFiber
ConvertFiberToThread
FreeLibrary
LoadLibraryA
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
WriteConsoleW
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
lstrcatW
GetOEMCP
GetACP
IsValidCodePage
PostQueuedCompletionStatus
GetQueuedCompletionStatus
DeleteTimerQueue
CreateTimerQueueTimer
CancelIo
GetProcessHeap
HeapAlloc
HeapFree
SetCurrentDirectoryW
Wow64RevertWow64FsRedirection
Sleep
OpenProcess
Wow64DisableWow64FsRedirection
DeleteCriticalSection
GetLocalTime
SetFileAttributesW
CreateIoCompletionPort
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateThread
MapViewOfFile
CreateEventA
CreateFileMappingA
ResetEvent
SetEvent
CreateEventW
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateMutexW
WaitForMultipleObjects
GetFileTime
GetDriveTypeW
GetSystemTime
CopyFileW
SystemTimeToFileTime
ReadFile
GetDiskFreeSpaceExW
ExitThread
GetTimeZoneInformation
HeapReAlloc
SetStdHandle
GetExitCodeProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleOutputCP
FlushFileBuffers
GetCommandLineW
GetCommandLineA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
SetConsoleCtrlHandler
ExitProcess
ResumeThread
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
SetFileTime
DeviceIoControl
GetLogicalDrives
GetVolumeInformationW
CreateDirectoryW
lstrcmpiW
VirtualFree
VirtualProtect
VirtualAlloc
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetFileAttributesW
lstrcpyW
EncodePointer
SwitchToThread
TryEnterCriticalSection
AreFileApisANSI
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
MultiByteToWideChar
CreateFileW
GetFileSizeEx
GetModuleFileNameW
MoveFileW
SetFilePointerEx
CloseHandle
DeleteFileW
GetLastError
SetEndOfFile
SetFilePointer
WriteFile
GetEnvironmentStringsW
GetCurrentDirectoryW
QueryPerformanceFrequency
GetStringTypeW
user32
wsprintfW
wvsprintfW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
advapi32
CryptCreateHash
OpenThreadToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
SetSecurityInfo
InitializeAcl
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
LookupPrivilegeNameW
RegCloseKey
GetSecurityDescriptorDacl
AdjustTokenPrivileges
GetSecurityDescriptorSacl
LookupPrivilegeValueW
EnumServicesStatusW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
EqualSid
CreateWellKnownSid
GetUserNameW
LookupAccountSidW
CloseServiceHandle
OpenSCManagerW
GetTokenInformation
shell32
CommandLineToArgvW
shlwapi
PathGetArgsW
PathRemoveExtensionW
PathRemoveFileSpecW
PathStripPathW
PathFindExtensionW
StrStrW
PathFileExistsW
StrStrIW
StrStrIA
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
ws2_32
WSAGetLastError
setsockopt
htons
inet_ntop
getsockopt
gethostname
inet_ntoa
socket
WSAStartup
WSASocketW
shutdown
gethostbyname
closesocket
WSAIoctl
bind
WSACleanup
recv
send
WSASetLastError
WSAAddressToStringW
iphlpapi
GetIpNetTable
netapi32
NetApiBufferFree
NetShareEnum
mpr
WNetOpenEnumW
WNetCloseEnum
WNetEnumResourceW
rstrtmgr
RmStartSession
RmGetList
RmRegisterResources
RmEndSession
everything32
Everything_GetResultSize
Everything_SetSearchW
Everything_GetResultFullPathNameW
Everything_QueryW
Everything_GetLastError
Everything_Exit
Everything_SetRequestFlags
Everything_IsDBLoaded
Everything_GetNumResults
Everything_SetSort
bcrypt
BCryptGenRandom
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ