Static task
static1
Behavioral task
behavioral1
Sample
7773d8f158e36f66370ffdc27588f491c4abe2613baed9b3ea2b7efa86af8796.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7773d8f158e36f66370ffdc27588f491c4abe2613baed9b3ea2b7efa86af8796.exe
Resource
win10v2004-20220901-en
General
-
Target
7773d8f158e36f66370ffdc27588f491c4abe2613baed9b3ea2b7efa86af8796
-
Size
1.0MB
-
MD5
9edc1f92e5d318222169ed549257555d
-
SHA1
fc5b03dd4064ade080ddec0368d912516adb3a60
-
SHA256
7773d8f158e36f66370ffdc27588f491c4abe2613baed9b3ea2b7efa86af8796
-
SHA512
fe0f0007b1548a0f4b2288f7e0d3e15e9aef2b30a61bf06205829ff46aa1ba3247f9974fc3fecee4ddacd35cc8a7111bac3634a6031b308927ca1dd049906fa9
-
SSDEEP
12288:7w9ezFXTSvmbZkCkWrs5/mzfi2AJ03eAmJwjUz70NqqqFZ6US62QCo4609UyPcBY:Tt1VfkMs5Mi2oFAmJzdbEUyIiFQwzes
Malware Config
Signatures
Files
-
7773d8f158e36f66370ffdc27588f491c4abe2613baed9b3ea2b7efa86af8796.exe windows x86
a54c7acb53d07552cd785d7acfb4c961
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
rasapi32
RasGetHport
RasGetCredentialsW
RasGetCustomAuthDataW
RasConnectionNotificationW
RasValidateEntryNameW
RasSetEapUserDataA
RasDeleteEntryW
RasGetErrorStringW
RasDialW
RasEnumConnectionsW
RasHangUpW
RasEnumConnectionsA
RasSetCustomAuthDataW
RasFreeEapUserIdentityW
RasEnumEntriesW
gdi32
GetTextExtentPointA
ArcTo
RectVisible
GetNearestPaletteIndex
EqualRgn
EngFillPath
advapi32
GetAclInformation
GetSidSubAuthority
LsaICLookupSids
DeleteAce
RegSetValueExA
AreAllAccessesGranted
LsaEnumerateTrustedDomains
GetEffectiveRightsFromAclW
SetEntriesInAclW
AddAuditAccessAce
RegSetValueW
SetTokenInformation
ChangeServiceConfig2W
I_ScSetServiceBitsW
GetCurrentHwProfileA
GetSidLengthRequired
RegisterServiceCtrlHandlerW
GetSidIdentifierAuthority
SystemFunction029
CryptGenKey
RegCreateKeyExW
RegQueryValueExA
uxtheme
DrawThemeBackground
GetThemeAppProperties
GetThemePartSize
SetWindowTheme
GetThemeBackgroundExtent
GetThemeSysFont
GetCurrentThemeName
GetThemeBackgroundRegion
GetThemeFont
CloseThemeData
DrawThemeText
kernel32
SetConsoleCtrlHandler
GetSystemDefaultLCID
GetComputerNameA
ResetEvent
PulseEvent
FlushFileBuffers
GetVersionExW
GetConsoleTitleA
GetCompressedFileSizeW
GetFileAttributesExW
GetSystemWindowsDirectoryW
OpenEventA
GetNamedPipeHandleStateA
CallNamedPipeA
GetProcessTimes
SetEvent
lstrcpynW
SetFileAttributesW
VirtualAlloc
GetProcessIoCounters
EnumResourceTypesW
GetCurrentDirectoryA
GetVolumeNameForVolumeMountPointW
AddAtomA
CreateEventW
RemoveDirectoryA
GetUserDefaultLangID
GetFileTime
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 200KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 300KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 108KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 140KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 80KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ