Static task
static1
Behavioral task
behavioral1
Sample
4dfbba9269f4c8b526ac6c6b4d1dc60ff5b33a382cae2dbb3ec2fec798c22091.exe
Resource
win7-20220812-en
General
-
Target
4dfbba9269f4c8b526ac6c6b4d1dc60ff5b33a382cae2dbb3ec2fec798c22091
-
Size
265KB
-
MD5
130b0739196e29eb784ce41a1ca5bce7
-
SHA1
5d6c8fe33dee0f8b133829237febad03bb5bfdbe
-
SHA256
4dfbba9269f4c8b526ac6c6b4d1dc60ff5b33a382cae2dbb3ec2fec798c22091
-
SHA512
5db110247e58621adcec653b45bc96347a8ae69ee9617136dbc9f1e12a95b65fa85c3f38253dbfe92a4306a3134d362f836bf5a34585f0e0f6ef22888f324f22
-
SSDEEP
6144:48hgIfgne6dXzTq53f0FIUUakX7uXjF0zzgbS2:YjdzTqR8IU+7QuzzgW2
Malware Config
Signatures
Files
-
4dfbba9269f4c8b526ac6c6b4d1dc60ff5b33a382cae2dbb3ec2fec798c22091.exe windows x86
bc1fc4c5bd02c96f9a685aa11c05160a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateClassMoniker
CoRevokeClassObject
CoRegisterClassObject
CoInitializeEx
GetRunningObjectTable
CoUninitialize
version
GetFileVersionInfoA
VerQueryValueA
kernel32
GetVersionExA
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
SetEvent
OpenEventA
TerminateThread
SuspendThread
ResumeThread
FormatMessageA
WaitForMultipleObjects
LocalFree
LocalUnlock
LocalLock
LocalAlloc
Sleep
CreateThread
FindCloseChangeNotification
FindFirstChangeNotificationA
GetExitCodeThread
ReleaseMutex
CreateMutexA
WideCharToMultiByte
GetDriveTypeA
lstrlenW
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
GetVersion
GetModuleFileNameA
FindClose
GetDiskFreeSpaceA
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
RemoveDirectoryA
DeleteFileA
GetFileSize
CreateFileA
GetFileAttributesA
WaitForSingleObject
GetTempPathA
MoveFileA
GetTickCount
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTempFileNameA
SetUnhandledExceptionFilter
SetCurrentDirectoryA
GetCurrentDirectoryA
SetProcessWorkingSetSize
GetCurrentProcess
WriteFile
GetThreadContext
VirtualQuery
IsBadWritePtr
GetCurrentProcessId
OpenProcess
SetFilePointer
GlobalMemoryStatus
GetLocaleInfoA
SetStdHandle
LCMapStringW
LCMapStringA
ReadFile
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualProtect
GetStdHandle
SetHandleCount
GetTimeZoneInformation
UnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
QueryPerformanceCounter
VirtualAlloc
VirtualFree
ResetEvent
FindNextChangeNotification
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
GetLastError
CloseHandle
CreateProcessA
SetErrorMode
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
CreateDirectoryA
SetEnvironmentVariableW
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
ExitProcess
ExitThread
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
RaiseException
RtlUnwind
HeapReAlloc
SetFileAttributesA
GetACP
GetOEMCP
GetCPInfo
GetFileInformationByHandle
PeekNamedPipe
GetFileType
SetEndOfFile
TerminateProcess
HeapSize
user32
GetDC
ReleaseDC
CharPrevA
CharNextA
RegisterWindowMessageA
RegisterClassExA
GetClassInfoExA
UnregisterClassA
SetWindowsHookExA
UnhookWindowsHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetClassInfoA
RegisterClassA
GetSystemMetrics
CreateWindowExA
DefWindowProcA
SetTimer
KillTimer
DestroyWindow
PostThreadMessageA
FindWindowA
PostMessageA
IsWindow
SendMessageA
PostQuitMessage
advapi32
RegDeleteValueA
FreeSid
RegEnumKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
gdi32
GetDeviceCaps
shlwapi
PathRemoveFileSpecA
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE