Static task
static1
Behavioral task
behavioral1
Sample
f065294ae8b272c08aa8bc9981aea219fe1847e556bf34f60471710a6f514c8d.exe
Resource
win7-20220812-en
General
-
Target
f065294ae8b272c08aa8bc9981aea219fe1847e556bf34f60471710a6f514c8d
-
Size
267KB
-
MD5
2c1b5b628be48f0b6541db0bc4949620
-
SHA1
a5c16eceddf5c2e4db6771d4bbe24da2d14cafb9
-
SHA256
f065294ae8b272c08aa8bc9981aea219fe1847e556bf34f60471710a6f514c8d
-
SHA512
1785903f9554b25fa131cd72fb21562d2e6fb4ecde9b88d79b5ef498a16dea5fdbff650d8ca8be2bd6d705ec9c456abdd1353733edbf0de62e16ef9169280bd2
-
SSDEEP
3072:kI1rOYg/bg8cjcTPLt3dE3GBJfmz/JC1s0qB0fXqv14QOBv:kI1rLabgmTzpUGm1xSfaXOBv
Malware Config
Signatures
Files
-
f065294ae8b272c08aa8bc9981aea219fe1847e556bf34f60471710a6f514c8d.exe windows x86
3c6d32d7c3523cecea28b9fa5fc1e619
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CreateServiceA
StartServiceA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
DeleteService
CloseServiceHandle
ControlService
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegQueryValueExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
ChangeServiceConfigA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
opengl32
glEvalCoord2fv
glScalef
glEnd
wglSwapMultipleBuffers
glMaterialiv
glRectf
glTranslatef
glGetIntegerv
kernel32
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateSemaphoreW
ProcessIdToSessionId
SetNamedPipeHandleState
GetShortPathNameW
GetFullPathNameA
CreateJobObjectW
GetStartupInfoA
SetFileAttributesW
GetCommandLineW
SystemTimeToFileTime
GetLocalTime
GetExitCodeThread
WaitForSingleObject
GetModuleHandleA
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
SetFileTime
ReadFile
SetFilePointer
GetFileSize
DeleteCriticalSection
FormatMessageW
lstrcpyW
LocalFree
SuspendThread
ResumeThread
TerminateThread
GetSystemDirectoryW
MulDiv
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetDriveTypeW
CreateFileW
GetVersionExW
CreateThread
GetModuleFileNameW
lstrcmpiW
CloseHandle
SetCurrentDirectoryW
SetEnvironmentVariableW
GetTempPathW
GetUserDefaultLCID
GetUserDefaultUILanguage
GetOEMCP
GetACP
VirtualFree
VirtualAlloc
DeleteFileW
FindNextFileW
RemoveDirectoryW
lstrlenW
GetSystemTimeAsFileTime
lstrcmpW
GetStdHandle
WriteFile
lstrlenA
ExpandEnvironmentStringsW
CreateDirectoryW
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WideCharToMultiByte
GetTimeZoneInformation
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapAlloc
HeapReAlloc
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sections
.img Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE