Static task
static1
Behavioral task
behavioral1
Sample
672af3a86b33ff3c20b57476be9d352dbe7f0b691a69ce4caf598d5041b9e7c5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
672af3a86b33ff3c20b57476be9d352dbe7f0b691a69ce4caf598d5041b9e7c5.exe
Resource
win10v2004-20221111-en
General
-
Target
672af3a86b33ff3c20b57476be9d352dbe7f0b691a69ce4caf598d5041b9e7c5
-
Size
376KB
-
MD5
9c093ad982f55cd4db4543d4d93bb62d
-
SHA1
11d572ac4ee3da3830cf93a92b0e6f67b80f46cf
-
SHA256
672af3a86b33ff3c20b57476be9d352dbe7f0b691a69ce4caf598d5041b9e7c5
-
SHA512
10d1a44495979f0568c6aadb97f72324eb3436aec2c08c655e46e79806077905ea8493193c28012cc9ebae05ee29a192d2d9d4f4083e0d3cb4d75d5df216152a
-
SSDEEP
6144:YTtcOXH0XL38ObzidxaGSuwoTBm7f0iXUj2PhmvtR5iAZE+jkt8sdK:Y+OXH0XLMO3UuEziX42PEvtviAZ7
Malware Config
Signatures
Files
-
672af3a86b33ff3c20b57476be9d352dbe7f0b691a69ce4caf598d5041b9e7c5.exe windows x86
d447fd66daa60a92ce944925ab861afd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCalendarInfoW
GetCurrentThreadId
GlobalCompact
CompareStringA
HeapDestroy
FlushViewOfFile
ExitProcess
GetCurrentProcess
SetThreadIdealProcessor
EnumSystemLocalesA
SetLocaleInfoW
CreateNamedPipeW
TlsGetValue
FoldStringA
WriteProfileSectionA
OpenSemaphoreA
GlobalReAlloc
InterlockedIncrement
LCMapStringA
CreateDirectoryA
RtlMoveMemory
CreateEventW
SetHandleCount
GetCommandLineA
InterlockedExchange
DeleteCriticalSection
GetStdHandle
WriteProfileStringW
GetProfileStringW
FreeEnvironmentStringsA
GetLongPathNameA
GetLastError
EnterCriticalSection
WritePrivateProfileSectionW
HeapCreate
SetThreadContext
lstrcmpA
SetLocalTime
GetStringTypeW
LCMapStringW
SetConsoleMode
GetTimeZoneInformation
GetVersion
CreateDirectoryExW
FileTimeToDosDateTime
TlsFree
GetNamedPipeInfo
GetDiskFreeSpaceExW
GetSystemDirectoryW
QueryPerformanceCounter
MoveFileW
GetTickCount
MultiByteToWideChar
EnumDateFormatsW
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleA
OpenMutexA
GetOEMCP
GetLocalTime
GetStartupInfoA
SetLastError
InterlockedDecrement
GetEnvironmentStrings
ReadFile
VirtualQuery
UnhandledExceptionFilter
TlsAlloc
GetModuleFileNameA
GetConsoleTitleA
CreateMutexA
SetConsoleCtrlHandler
GetFileAttributesA
CreatePipe
FlushFileBuffers
RtlUnwind
WideCharToMultiByte
EnumResourceNamesA
lstrlen
CreateDirectoryW
ReadConsoleA
HeapAlloc
GetSystemTime
VirtualAllocEx
FreeEnvironmentStringsW
SetConsoleTitleA
DebugBreak
GetCurrentThread
IsBadWritePtr
SetStdHandle
FreeLibrary
GetCPInfo
VirtualAlloc
GetFileType
FlushInstructionCache
InitializeCriticalSection
RtlZeroMemory
CloseHandle
GetNumberFormatA
GetConsoleScreenBufferInfo
GetACP
DeleteAtom
EnumDateFormatsExA
GetPrivateProfileSectionNamesA
GetSystemDefaultLCID
TlsSetValue
FreeLibraryAndExitThread
ReadConsoleInputA
GetAtomNameA
GetFileAttributesExA
GetEnvironmentStringsW
SetFilePointer
GetSystemTimeAsFileTime
GetConsoleMode
CompareStringW
TerminateProcess
GetStringTypeA
LoadLibraryA
GetCurrentProcessId
GetThreadSelectorEntry
WriteFile
HeapFree
LeaveCriticalSection
VirtualFree
GetProcAddress
user32
CharUpperW
GetMonitorInfoA
GetKeyboardLayout
ScrollWindow
OemToCharBuffW
MessageBoxW
DrawTextExW
GetKeyboardState
RegisterClipboardFormatA
RegisterDeviceNotificationA
IsDialogMessageW
MessageBoxA
DrawStateW
GetMessageExtraInfo
RegisterClipboardFormatW
EnumDisplaySettingsA
RegisterClassA
CreateWindowExW
UnionRect
GetSysColor
DefWindowProcW
RegisterClassExA
EnableScrollBar
DestroyWindow
ShowWindow
comctl32
ImageList_EndDrag
CreateMappedBitmap
CreateStatusWindow
CreateToolbarEx
CreatePropertySheetPage
InitCommonControlsEx
GetEffectiveClientRect
ImageList_GetIconSize
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_SetIconSize
ImageList_DrawEx
InitMUILanguage
ImageList_GetIcon
ImageList_SetBkColor
DrawStatusTextA
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_DragEnter
DrawInsert
advapi32
CryptExportKey
StartServiceW
RegSetKeySecurity
RegReplaceKeyA
RegEnumValueA
RegOpenKeyW
LookupAccountNameA
CryptSetProviderExW
RegFlushKey
CryptVerifySignatureA
LookupPrivilegeDisplayNameW
CryptAcquireContextW
LookupAccountNameW
RegEnumKeyExA
RegConnectRegistryW
CryptDuplicateKey
RegOpenKeyExA
CreateServiceW
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ