Static task
static1
Behavioral task
behavioral1
Sample
7acec0820393946a8276d4261bf6364c2e2e826fe6b21ec94313a4600ab060cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7acec0820393946a8276d4261bf6364c2e2e826fe6b21ec94313a4600ab060cf.exe
Resource
win10v2004-20220812-en
General
-
Target
7acec0820393946a8276d4261bf6364c2e2e826fe6b21ec94313a4600ab060cf
-
Size
861KB
-
MD5
06a52ad7cf62d2b5671cb9cef0386af1
-
SHA1
2cea15c8008571b139d321678e17726835b52cfd
-
SHA256
7acec0820393946a8276d4261bf6364c2e2e826fe6b21ec94313a4600ab060cf
-
SHA512
1c19f4080a2f24b1062c3d14e72fefee82534067277aa42a0586158825e38baab2d12a9d439aa423b85c6866d80fbc78e1f54751fb0a81d1d5b3b55e30c5cecd
-
SSDEEP
6144:MaryxKHLd+mU4ocv2MHWw+barTRi6e81INBQ6oKu1W+:MaryxKZ3ocv26WwvrTREyIfQh1H
Malware Config
Signatures
Files
-
7acec0820393946a8276d4261bf6364c2e2e826fe6b21ec94313a4600ab060cf.exe windows x86
9a2180d2429fda75f1e8c2cc7803003f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AddAccessAllowedAce
AllocateAndInitializeSid
CryptSetProviderW
EqualSid
FreeSid
GetAce
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
ObjectCloseAuditAlarmA
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueExA
RegSetKeySecurity
RegSetValueExA
RegSetValueExW
SetSecurityDescriptorDacl
AdjustTokenPrivileges
DuplicateTokenEx
GetLocalManagedApplications
IsValidSid
OpenProcessToken
RegUnLoadKeyW
SetThreadToken
kernel32
GetCurrentProcess
GetExitCodeThread
GetProcAddress
IsProcessorFeaturePresent
LoadLibraryA
Process32First
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
BindIoCompletionCallback
CreateTapePartition
FindResourceA
FreeLibrary
FreeResource
GetConsoleAliasExesA
GetHandleInformation
GetProcessTimes
GetVersionExA
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
SizeofResource
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
lstrlenW
VirtualAlloc
CloseHandle
CompareStringW
CreateEventW
CreateThread
EnumCalendarInfoA
FindResourceW
FormatMessageW
FreeLibraryAndExitThread
GetPrivateProfileIntW
GetSystemDirectoryW
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadStringPtrA
LoadLibraryW
SetEvent
SetFilePointer
TlsGetValue
TlsSetValue
WaitForSingleObject
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
InterlockedCompareExchange
QueryPerformanceCounter
Sleep
GetTimeFormatA
GetDateFormatA
GetLocaleInfoW
ExitThread
GetLastError
ResumeThread
HeapFree
HeapAlloc
GetModuleHandleW
ExitProcess
HeapReAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsFree
SetLastError
GetCurrentThread
GetTimeZoneInformation
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
HeapSize
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
WriteFile
GetModuleFileNameA
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
RtlUnwind
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CompareStringA
SetEnvironmentVariableA
CreateFileA
ole32
CoInitialize
CLSIDFromString
ReleaseStgMedium
IsEqualGUID
DllGetClassObjectWOW
CoUninitialize
CoCreateInstance
CoGetCurrentProcess
oleaut32
SafeArrayDestroy
VarUI2FromDisp
VarCyInt
Sections
.text Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 444KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE