Static task
static1
Behavioral task
behavioral1
Sample
276e76b3f5515b9f64143ed97f606a1031769a68e47e6922d7bfbf1dfb8916b7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
276e76b3f5515b9f64143ed97f606a1031769a68e47e6922d7bfbf1dfb8916b7.exe
Resource
win10v2004-20221111-en
General
-
Target
276e76b3f5515b9f64143ed97f606a1031769a68e47e6922d7bfbf1dfb8916b7
-
Size
857KB
-
MD5
cc113de0c40559f8645cddc560fc89a5
-
SHA1
2e2feefe175dbe1577b54847e971cee70f39e26f
-
SHA256
276e76b3f5515b9f64143ed97f606a1031769a68e47e6922d7bfbf1dfb8916b7
-
SHA512
df02cb7ddff86fd68c2f36caa2eb14927b5feb9610c4f0be005c1278b6912085fc5fb65ab5fac15533baf960be289508c4a26461b05a6e232cec5b44890f4d1b
-
SSDEEP
24576:sf09nEigFFDjKhZFoGMQoWluSXlP7e3M:sfgETDirporSy
Malware Config
Signatures
Files
-
276e76b3f5515b9f64143ed97f606a1031769a68e47e6922d7bfbf1dfb8916b7.exe windows x86
d917ad7b0502839bd8e6b78e724fec29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringW
SetEndOfFile
GetCommConfig
IsBadHugeWritePtr
WritePrivateProfileSectionW
GetDiskFreeSpaceA
UnhandledExceptionFilter
FreeEnvironmentStringsA
lstrcmpiA
WritePrivateProfileStructW
SetProcessShutdownParameters
GetExitCodeProcess
lstrcmpiW
SetVolumeLabelW
GetLocaleInfoA
EnumLanguageGroupLocalesA
DeleteVolumeMountPointA
IsProcessorFeaturePresent
SetMailslotInfo
FreeEnvironmentStringsW
GetVersionExA
GetPrivateProfileSectionA
GetSystemDefaultLangID
GetCurrentDirectoryW
CreateHardLinkW
GetTimeFormatA
InterlockedCompareExchange
SetEvent
GlobalAlloc
GetCurrencyFormatW
PurgeComm
SetLocaleInfoA
FindFirstVolumeW
FlushInstructionCache
WritePrivateProfileSectionA
SetPriorityClass
UnmapViewOfFile
OutputDebugStringA
GetStringTypeA
FindCloseChangeNotification
GetLocaleInfoW
SetEnvironmentVariableA
LocalCompact
FindFirstFileW
WaitCommEvent
BackupRead
CompareStringW
GetCommState
GetPrivateProfileStructA
FindNextVolumeMountPointA
LocalFileTimeToFileTime
GetLongPathNameW
FindAtomA
CommConfigDialogA
GetTimeFormatW
QueueUserWorkItem
GetStringTypeExA
VerifyVersionInfoA
SetErrorMode
FreeUserPhysicalPages
GetAtomNameW
GetTempPathA
SetThreadIdealProcessor
GetFileTime
MulDiv
GetThreadPriorityBoost
CreateFileMappingA
IsBadStringPtrW
VerSetConditionMask
ContinueDebugEvent
ReplaceFileA
SetNamedPipeHandleState
GetCompressedFileSizeW
SetTapePosition
DnsHostnameToComputerNameW
DeviceIoControl
lstrcpyW
GetModuleHandleW
FileTimeToSystemTime
GetPrivateProfileSectionW
SetHandleInformation
TlsSetValue
GetDateFormatA
GetComputerNameW
PrepareTape
GetFileInformationByHandle
WaitNamedPipeA
EnumDateFormatsExW
SetFileApisToOEM
ReadDirectoryChangesW
GetThreadLocale
GetCurrentDirectoryA
EnumResourceLanguagesW
FindResourceW
_hread
GlobalFix
ProcessIdToSessionId
LoadResource
LocalUnlock
GetFileAttributesExW
GetNumberFormatW
ResumeThread
_llseek
FoldStringW
SetLocalTime
CreateFileMappingW
GetCurrentThread
GetVolumeNameForVolumeMountPointW
lstrcpyA
CompareStringA
GetOverlappedResult
FileTimeToDosDateTime
SetCalendarInfoW
FlushViewOfFile
QueryPerformanceCounter
SearchPathA
ResetEvent
GetThreadPriority
GetSystemInfo
user32
DestroyWindow
CharUpperBuffW
TrackPopupMenuEx
ChildWindowFromPoint
CreateCaret
SetShellWindow
DlgDirListW
MessageBoxIndirectW
IsZoomed
GetGUIThreadInfo
SetSysColors
MsgWaitForMultipleObjects
CallWindowProcW
GetKeyState
LoadCursorFromFileW
TrackMouseEvent
GetWindowRgn
SetMenuItemInfoA
CopyImage
GetMessageA
GetLastInputInfo
EnableWindow
VkKeyScanA
CharLowerW
DdeGetData
shlwapi
PathAppendA
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 615KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ