Static task
static1
Behavioral task
behavioral1
Sample
cf444db2828ea2975577e809f37b28ee01b86798371de5560b10dbce9ac2228a.exe
Resource
win7-20220812-en
General
-
Target
cf444db2828ea2975577e809f37b28ee01b86798371de5560b10dbce9ac2228a
-
Size
360KB
-
MD5
0c28836002d0712b3304de9521cfa2f0
-
SHA1
1dcae6c88ced6048d76b71bc35b77d893d399148
-
SHA256
cf444db2828ea2975577e809f37b28ee01b86798371de5560b10dbce9ac2228a
-
SHA512
b3f725e0064e8bae1280bc71bf0ba3373dc4ec7cea0c942dab73efc0b5ded8b429efa728d02a720d4d36a85b6449df72ece0e663def10e1d1ae08474818444a4
-
SSDEEP
6144:HfSsUMgXd0+p1FiHS7U2PE8T6G7DLfdqqDL6RsisssssssUkd+wCtmPTXdiiu:q5PphU2c8T6G7Pfgqn6vsssssssUSnTi
Malware Config
Signatures
Files
-
cf444db2828ea2975577e809f37b28ee01b86798371de5560b10dbce9ac2228a.exe windows x86
a5966d6cb877228ddb44e9ded0dd96ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
SystemTimeToFileTime
CreateDirectoryW
SetFileTime
WriteFile
GetLastError
DeleteFileW
InterlockedDecrement
lstrlenW
lstrlenA
DebugBreak
OutputDebugStringW
InterlockedIncrement
GetSystemTimeAsFileTime
SetEvent
Sleep
WaitForSingleObject
SetEndOfFile
TlsFree
TlsAlloc
TlsSetValue
IsBadWritePtr
IsBadReadPtr
ResetEvent
GetTickCount
CreateEventW
SetWaitableTimer
CreateWaitableTimerW
GetDiskFreeSpaceExW
GetTempFileNameW
GetTempPathW
CancelWaitableTimer
WaitForMultipleObjects
GetModuleFileNameW
GetFileAttributesW
SizeofResource
LoadResource
FindResourceW
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
CopyFileW
GetVersionExW
GetModuleHandleA
TerminateProcess
ExitProcess
GetPrivateProfileStringW
FreeLibrary
LoadLibraryExW
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleW
MoveFileExW
UnmapViewOfFile
GetCurrentThread
GetFileType
CreateFileMappingW
GetPrivateProfileIntW
GetSystemTime
lstrcmpA
SetLastError
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrcmpiW
CreateThread
GetCurrentProcessId
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
HeapSize
SetHandleCount
GetConsoleMode
GetConsoleCP
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
HeapReAlloc
HeapCreate
GetStartupInfoA
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
LoadLibraryA
InterlockedExchange
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
ReadFile
SetFilePointer
GetFileSize
VirtualAlloc
VirtualFree
MapViewOfFile
CloseHandle
user32
DestroyWindow
wvsprintfW
CharNextW
shell32
SHGetSpecialFolderPathW
shlwapi
StrStrIA
SHDeleteValueW
StrStrIW
PathGetDriveNumberW
PathFileExistsW
PathCombineW
PathIsRootW
SHGetValueW
PathFindFileNameA
PathAppendW
StrCmpIW
PathFindFileNameW
PathRemoveFileSpecW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
setupapi
SetupIterateCabinetW
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE