Static task
static1
Behavioral task
behavioral1
Sample
69333cfb6b9828a83fdad750dfda809115e5f7d88ae7ba5908bfc9bf09e32140.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
69333cfb6b9828a83fdad750dfda809115e5f7d88ae7ba5908bfc9bf09e32140.exe
Resource
win10v2004-20220812-en
General
-
Target
69333cfb6b9828a83fdad750dfda809115e5f7d88ae7ba5908bfc9bf09e32140
-
Size
3.9MB
-
MD5
da526552966be04e4380b37fe49530ee
-
SHA1
c3cfe9ec05d6e135c23abd4db86df3bab3104f86
-
SHA256
69333cfb6b9828a83fdad750dfda809115e5f7d88ae7ba5908bfc9bf09e32140
-
SHA512
e3e8cdce08f269ee87024e052c84f5974a050ce00bfba835ebf6a20e912f0ee91d2caa188bc64f1786350ccb3812606ec6c2d7dd4f84dad1ac538a3d8df2605e
-
SSDEEP
98304:YMZoZ3WaTD+IiP4j6SH5GDYiQ5qofhocWEyX+9MDJxTvYV2Ec5lm++Yutsee0P8M:Foh+ISY6lmojGR
Malware Config
Signatures
Files
-
69333cfb6b9828a83fdad750dfda809115e5f7d88ae7ba5908bfc9bf09e32140.exe windows x86
be824935400ed0b50791ce25db65ef97
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
SetLastError
GetFileAttributesA
CreateFileA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
ExitThread
AddVectoredExceptionHandler
GetProcessHeap
CreateMutexA
GetModuleHandleExW
CloseHandle
GetLastError
InterlockedCompareExchange
GetLocalTime
EnterCriticalSection
GetModuleHandleA
GetVersionExA
IsBadWritePtr
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
GetTempPathA
GetProcAddress
LoadLibraryA
GetCurrentThread
RemoveDirectoryA
ResumeThread
GetCurrentThreadId
ExitProcess
HeapAlloc
LocalFileTimeToFileTime
HeapFree
GetTickCount
FileTimeToLocalFileTime
CreateFileW
Sleep
InitializeCriticalSection
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
SetEndOfFile
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW
advapi32
RegQueryInfoKeyW
RegEnumKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExW
RegOpenKeyW
RegQueryValueExW
RegEnumKeyW
RegEnumValueW
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExW
RegQueryValueW
user32
MessageBoxA
BringWindowToTop
SetFocus
DefWindowProcW
AppendMenuW
DispatchMessageA
GetWindowTextW
RegisterClassExA
PostMessageW
RegisterClassExW
SetWindowPos
UpdateWindow
LoadIconA
GetClientRect
PostMessageA
SendMessageA
FindWindowW
CreatePopupMenu
DefWindowProcA
PeekMessageA
CloseDesktop
TrackPopupMenu
GetWindowRect
RegisterWindowMessageA
SetForegroundWindow
RedrawWindow
EnumWindows
GetLastInputInfo
PostQuitMessage
GetWindowTextA
CreateWindowExA
DestroyWindow
DispatchMessageW
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ