Static task
static1
Behavioral task
behavioral1
Sample
743a53b72e6acaa5735c4ee0e6fc3eaa4dcf6ecaa6dad10bd4bc51c2deb33b56.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
743a53b72e6acaa5735c4ee0e6fc3eaa4dcf6ecaa6dad10bd4bc51c2deb33b56.exe
Resource
win10v2004-20220901-en
General
-
Target
743a53b72e6acaa5735c4ee0e6fc3eaa4dcf6ecaa6dad10bd4bc51c2deb33b56
-
Size
29KB
-
MD5
396f71b2d4cd6638e520fca22d296e3a
-
SHA1
d0cf823afdf173d7c18f0506b7900990d23e71c2
-
SHA256
743a53b72e6acaa5735c4ee0e6fc3eaa4dcf6ecaa6dad10bd4bc51c2deb33b56
-
SHA512
ae6384db336bdc4bdcf277c8c490f327f1d0d499bfc810b6de7cf8c2e7eaa1964669b2bd82d15a6785464e657df3ef750a1a818d652fa8c54ef3e19422e76e34
-
SSDEEP
192:TddElX5eBMvaMio0HMQoV37nK37nK37nvo0HVQoY7nolAjhhTJg1SxKp8BYlIbSq:UlnllAjhS8MlRpPhXcB/6yF
Malware Config
Signatures
Files
-
743a53b72e6acaa5735c4ee0e6fc3eaa4dcf6ecaa6dad10bd4bc51c2deb33b56.exe windows x86
a921b6af715992cfb1c52482ca5c04da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
mssign32
PvkPrivateKeyLoad
PvkPrivateKeyLoad
PvkPrivateKeyLoad
mtxoci
MTxOciInit
MTxOciInit
MTxOciInit
MTxOciInit
msoert2
CreateLogFile
CreateLogFile
CreateLogFile
CreateLogFile
nddeapi
NDdeGetTrustedShareA
NDdeGetTrustedShareA
NDdeGetTrustedShareA
NDdeGetTrustedShareA
mlang
ConvertINetReset
ConvertINetReset
kernel32
ReplaceFileA
GetACP
RtlMoveMemory
SetComputerNameA
QueryDosDeviceA
CreateJobObjectW
ReadConsoleOutputW
RegisterWowExec
Beep
_lopen
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
ReadFile
ReplaceFileA
GetACP
RtlMoveMemory
SetComputerNameA
QueryDosDeviceA
CreateJobObjectW
ReadConsoleOutputW
RegisterWowExec
Beep
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
pdh
PdhCloseLog
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhComputeCounterStatistics
PdhConnectMachineA
PdhConnectMachineW
PdhCreateSQLTablesA
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA
PdhEnumMachinesHW
PdhEnumMachinesW
PdhEnumObjectItemsA
PdhEnumObjectItemsHA
PdhEnumObjectItemsHW
PdhEnumObjectItemsW
PdhEnumObjectsA
PdhEnumObjectsHA
PdhEnumObjectsHW
PdhEnumObjectsW
PdhCloseLog
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhComputeCounterStatistics
PdhConnectMachineA
PdhConnectMachineW
PdhCreateSQLTablesA
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA
PdhEnumMachinesHW
PdhEnumMachinesW
PdhEnumObjectItemsA
PdhEnumObjectItemsHA
PdhEnumObjectItemsHW
PdhEnumObjectItemsW
PdhEnumObjectsA
PdhEnumObjectsHA
PdhEnumObjectsHW
PdhEnumObjectsW
PdhCloseLog
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhComputeCounterStatistics
PdhConnectMachineA
PdhConnectMachineW
PdhCreateSQLTablesA
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA
PdhEnumMachinesHW
PdhEnumMachinesW
PdhEnumObjectItemsA
PdhEnumObjectItemsHA
PdhEnumObjectItemsHW
PdhEnumObjectItemsW
PdhEnumObjectsA
PdhEnumObjectsHA
PdhEnumObjectsHW
PdhEnumObjectsW
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA
msvcrt
fopen
fread
Sections
.text Size: 2KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 10KB - Virtual size: 70KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ