Static task
static1
Behavioral task
behavioral1
Sample
932a64337784ca39c0a50e1c57b6a7ef5a33f1bd454986986914f4baaf7c6282.exe
Resource
win7-20220901-en
General
-
Target
932a64337784ca39c0a50e1c57b6a7ef5a33f1bd454986986914f4baaf7c6282
-
Size
200KB
-
MD5
e06cb24456c5f35199fade662cd0906b
-
SHA1
1f8758dbcd563d6c76860d16e563b6e62fb6342b
-
SHA256
932a64337784ca39c0a50e1c57b6a7ef5a33f1bd454986986914f4baaf7c6282
-
SHA512
56d15c526e73d20a8252652707e1ac574e6ad4eef5254aa295086bae7e38d70d635b81a7958431519cbcacdd9a8f5f3a85602d42bfdfca79b9e5113fa3baafc2
-
SSDEEP
3072:qoTRAGJselmx5SYJ2KD/PxnDcDNILKa98t5bxHpRgnKayJD63zk:qoTRxse07S0bbxIN2S/JRgPy94
Malware Config
Signatures
Files
-
932a64337784ca39c0a50e1c57b6a7ef5a33f1bd454986986914f4baaf7c6282.exe windows x86
67541f74ac099b898b8189435192421d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugBreak
TlsSetValue
OutputDebugStringA
LCMapStringA
IsValidCodePage
OutputDebugStringW
LCMapStringW
EnumSystemLanguageGroupsW
GetLocaleInfoA
GetTimeZoneInformation
WriteConsoleW
GetStringTypeW
HeapReAlloc
CompareFileTime
GetStringTypeA
GetCPInfo
winmm
sndPlaySoundA
oleacc
CreateStdAccessibleObject
ObjectFromLresult
oledlg
OleUIBusyW
advapi32
GetUserNameA
IsValidSecurityDescriptor
DuplicateTokenEx
GetSecurityDescriptorLength
LookupAccountSidA
AddAce
QueryServiceStatus
InitializeSecurityDescriptor
PrivilegeCheck
SetSecurityDescriptorOwner
RegOpenKeyExW
shell32
SHChangeNotify
SHGetMalloc
SHGetPathFromIDListW
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ