Static task
static1
Behavioral task
behavioral1
Sample
44ec36265f2328f7906c853f476e653aa511f7546f1a73c848aa7b948c0e82e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44ec36265f2328f7906c853f476e653aa511f7546f1a73c848aa7b948c0e82e8.exe
Resource
win10v2004-20220812-en
General
-
Target
44ec36265f2328f7906c853f476e653aa511f7546f1a73c848aa7b948c0e82e8
-
Size
566KB
-
MD5
0a9afa92aaa8c1638b0ff2dd160439a0
-
SHA1
3165fd3245f35c59fe1f3bfc7935015a182af62a
-
SHA256
44ec36265f2328f7906c853f476e653aa511f7546f1a73c848aa7b948c0e82e8
-
SHA512
3dcb99f0642e580410192bcee2eebda2e67ffc83aa17080431fbf8813de3ac2ad4f18868e795ce245a6b2b382888599e58d5056720d077f4003f5355c81675da
-
SSDEEP
12288:mNzBwqIgGLQUqvCQpegwxn3hnm9G8IwEy3D:q6BgGDcegOnx38IwEyT
Malware Config
Signatures
Files
-
44ec36265f2328f7906c853f476e653aa511f7546f1a73c848aa7b948c0e82e8.exe windows x86
05130d884a27bbb9711717bf7c1103ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
CloseHandle
GetWindowsDirectoryW
DeleteFileW
LocalFree
GetSystemTime
lstrcpyW
GetVolumeInformationW
ExpandEnvironmentStringsW
CreateProcessW
GetPrivateProfileStringW
GetPrivateProfileIntW
SetFilePointer
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
WaitForSingleObject
OpenProcess
GetVersionExW
TerminateProcess
FileTimeToSystemTime
GetModuleFileNameW
GetShortPathNameA
GetCurrentDirectoryW
GetLongPathNameA
RemoveDirectoryW
GetCurrentProcessId
GetExitCodeProcess
ExitProcess
GetCommandLineW
CreateMutexW
MapViewOfFile
UnmapViewOfFile
WideCharToMultiByte
lstrcmpW
MultiByteToWideChar
lstrlenW
FlushFileBuffers
OpenMutexW
DisableThreadLibraryCalls
GlobalFree
CreateFileMappingW
lstrcmpiW
lstrcatW
OpenFileMappingW
GetCurrentThreadId
ReleaseMutex
LocalAlloc
FindClose
GetProcAddress
SetLastError
GetLastError
CreateFileW
ReadFile
GetFileAttributesW
CopyFileW
LoadLibraryW
WriteFile
SetFileTime
GetSystemTimeAsFileTime
GetProcessHeap
GetTickCount
GetModuleHandleW
CreateDirectoryW
HeapFree
MoveFileExW
SystemTimeToFileTime
HeapAlloc
FreeLibrary
SetEndOfFile
FindFirstFileW
GetFileSize
HeapReAlloc
LoadLibraryA
WriteConsoleW
SetStdHandle
GetEnvironmentVariableW
SetFilePointerEx
OutputDebugStringW
LoadLibraryExW
LCMapStringW
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
Sleep
VirtualProtect
GetModuleHandleExW
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
DeleteCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetConsoleCP
GetConsoleMode
user32
GetDesktopWindow
MessageBoxW
GetWindowThreadProcessId
PostMessageW
GetParent
ExitWindowsEx
EnumWindows
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetNamedSecurityInfoW
AdjustTokenPrivileges
RegEnumValueW
LookupPrivilegeValueW
OpenProcessToken
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
IsValidSid
RegDeleteValueW
LookupAccountNameW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
shell32
CommandLineToArgvW
oleaut32
SysAllocString
SysFreeString
netapi32
NetUserEnum
NetUserGetInfo
NetApiBufferFree
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
shlwapi
PathRemoveFileSpecW
Sections
.text Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 122KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ