Static task
static1
Behavioral task
behavioral1
Sample
09f3aea667df5f4ac5dcb96a9d794718b04f838318a4d5e46bb7a52b7e5be589.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
09f3aea667df5f4ac5dcb96a9d794718b04f838318a4d5e46bb7a52b7e5be589.exe
Resource
win10v2004-20220812-en
General
-
Target
09f3aea667df5f4ac5dcb96a9d794718b04f838318a4d5e46bb7a52b7e5be589
-
Size
355KB
-
MD5
d50e6e087c74bab61936abf62cece207
-
SHA1
fcf1732ece354da9d87c39ec68cdef379bc8bc03
-
SHA256
09f3aea667df5f4ac5dcb96a9d794718b04f838318a4d5e46bb7a52b7e5be589
-
SHA512
e21702dcec4bdff88560241f9b10e6d056fe182f2b0335d7f36c2d66cdc1d1122ec01b097d29a6d841b176bc0a89fc2ca675d8c436fe88b46ce51c014db4cf3b
-
SSDEEP
6144:fxoD4BLeZGZphDuaJ5XhP1z2KWaa9ZDGEpmiShcDv9tp:ZoD4BYGZ2TpN5v9D
Malware Config
Signatures
Files
-
09f3aea667df5f4ac5dcb96a9d794718b04f838318a4d5e46bb7a52b7e5be589.exe windows x86
6e7978c7f9011f1e5bba9ca9514155f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
ShellExecuteExW
SHGetSpecialFolderPathW
psapi
EnumProcesses
GetModuleBaseNameW
shlwapi
SHDeleteKeyW
PathRemoveBackslashW
PathFileExistsW
PathRemoveFileSpecW
PathStripPathW
ws2_32
WSCGetProviderPath
WSCEnumProtocols
WSCDeinstallProvider
kernel32
GetProcessHeap
HeapFree
SetLastError
DeviceIoControl
CreateFileW
GetFileAttributesW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
WideCharToMultiByte
GetVersion
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
CreateProcessW
GetExitCodeProcess
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
GetSystemDirectoryW
GetWindowsDirectoryW
FindFirstFileW
RemoveDirectoryW
FindNextFileW
FindClose
SetFileAttributesW
DeleteFileW
OpenProcess
TerminateProcess
WaitForSingleObject
Sleep
MoveFileExW
MoveFileW
lstrcpynW
ExpandEnvironmentStringsW
lstrcmpiW
GetModuleFileNameW
lstrlenW
GetTickCount
GetLocaleInfoW
lstrcmpW
GetCurrentProcess
GetLastError
CloseHandle
MulDiv
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapReAlloc
VirtualAlloc
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetStartupInfoW
GetProcAddress
GetModuleHandleA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
user32
SetWindowLongW
DestroyWindow
GetDlgItem
CreateWindowExW
EndPaint
GetClientRect
BeginPaint
ReleaseDC
GetDlgItemTextW
SetDlgItemTextW
GetDC
MessageBoxW
DialogBoxParamW
EndDialog
ExitWindowsEx
EnableWindow
SetFocus
LoadIconW
SetClassLongW
FillRect
LoadBitmapW
SetWindowTextW
SendMessageW
RegisterClassExW
DefWindowProcW
GetWindowLongW
InvalidateRect
gdi32
GetTextAlign
SetTextAlign
GetMapMode
SetMapMode
GetObjectW
DPtoLP
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
SetBkMode
GetPixel
SetPixel
GetDeviceCaps
CreateFontIndirectW
SelectObject
TextOutW
StretchBlt
DeleteDC
DeleteObject
advapi32
DeleteService
EqualSid
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
OpenSCManagerW
OpenServiceW
CloseServiceHandle
ControlService
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
ole32
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE