Static task
static1
Behavioral task
behavioral1
Sample
da310315ac5eb729e22b7357e01aeb7c3058c8aa3e5e3a5f7a3622eba418b94a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
da310315ac5eb729e22b7357e01aeb7c3058c8aa3e5e3a5f7a3622eba418b94a.exe
Resource
win10v2004-20220812-en
General
-
Target
da310315ac5eb729e22b7357e01aeb7c3058c8aa3e5e3a5f7a3622eba418b94a
-
Size
348KB
-
MD5
6406e63c7852ee4594bd0574f917bd04
-
SHA1
7197f262a2eadb8b68dc1c23dfb7affc293a0e3a
-
SHA256
da310315ac5eb729e22b7357e01aeb7c3058c8aa3e5e3a5f7a3622eba418b94a
-
SHA512
6f8585c72ebba63eb02cbf577ef6c829c20ef1ec47d28d711753489b5945dc4a18c9749aaefdfd07fcbea74bb1783a407febac8d71fade768e71c5ef24e68fb5
-
SSDEEP
6144:R3SuF6j3AWvnJeZy5b/sUCysvhFbGEV+sEAz1dQ7LzsEdYl7gpKeHmAGZq7f:R3Sx3gU5z3cynPAz1dczXYCMfK
Malware Config
Signatures
Files
-
da310315ac5eb729e22b7357e01aeb7c3058c8aa3e5e3a5f7a3622eba418b94a.exe windows x86
e1e795b38369b9bee6c235a711587878
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
RegOpenKeyA
LookupAccountSidA
RegOpenKeyExA
RegRestoreKeyA
LookupAccountNameW
CryptSetProviderExA
CryptGetDefaultProviderW
RegRestoreKeyW
LookupSecurityDescriptorPartsW
RegQueryValueA
CryptHashSessionKey
LookupPrivilegeNameW
RegOpenKeyExW
shell32
ExtractIconExA
SHGetDataFromIDListW
SheChangeDirA
SHGetDiskFreeSpaceA
wininet
InternetSetOptionA
DeleteUrlCacheGroup
RetrieveUrlCacheEntryFileA
InternetCrackUrlW
UnlockUrlCacheEntryFileW
DeleteUrlCacheEntry
SetUrlCacheEntryGroup
InternetConfirmZoneCrossingW
GopherGetLocatorTypeW
user32
LoadBitmapW
UnregisterHotKey
IsCharAlphaNumericW
RegisterClassExA
RegisterClassA
EmptyClipboard
CloseWindowStation
gdi32
GetMetaRgn
GetCharABCWidthsW
SetArcDirection
DeviceCapabilitiesExW
GetColorSpace
SetBoundsRect
GetTextCharset
GetKerningPairs
LineDDA
PlayEnhMetaFileRecord
GetTextExtentPoint32A
AbortDoc
SetMapperFlags
Arc
GetTextExtentPoint32W
SetWinMetaFileBits
GetBitmapBits
UpdateICMRegKeyA
GetRegionData
SetRectRgn
GetMetaFileA
GetWorldTransform
GetRandomRgn
comctl32
InitCommonControlsEx
kernel32
WideCharToMultiByte
LCMapStringA
GetEnvironmentStrings
GetProcAddress
VirtualFree
FreeEnvironmentStringsW
GetSystemInfo
GetFileTime
HeapReAlloc
InitializeCriticalSection
GetCurrentProcessId
IsBadWritePtr
GetDateFormatA
LoadLibraryA
GetStringTypeA
GetFileType
SetHandleCount
UnhandledExceptionFilter
GetVersionExA
HeapDestroy
GetLocaleInfoA
GetLastError
GetConsoleCP
InterlockedExchange
OpenMutexA
TerminateProcess
EnumSystemLocalesA
GetCPInfo
LCMapStringW
IsValidCodePage
GetTickCount
GetCommandLineA
EnterCriticalSection
FreeEnvironmentStringsA
SetEnvironmentVariableA
CompareStringW
WriteFile
TlsSetValue
GetACP
HeapAlloc
GetModuleHandleA
MultiByteToWideChar
TlsAlloc
GetTimeZoneInformation
ExitProcess
VirtualAlloc
GetUserDefaultLCID
GetOEMCP
GetStdHandle
GetSystemTimeAsFileTime
HeapCreate
GetStartupInfoA
GetEnvironmentStringsW
IsValidLocale
FlushFileBuffers
SetStdHandle
TlsFree
QueryPerformanceCounter
LeaveCriticalSection
GetStringTypeW
VirtualProtect
GetCurrentThread
EnumSystemCodePagesW
GetCurrentThreadId
VirtualQuery
LockFile
SetFilePointer
HeapFree
GetTimeFormatA
ReadFile
GetCurrentProcess
CloseHandle
SetLastError
GetLocaleInfoW
DeleteCriticalSection
HeapSize
RtlUnwind
GetModuleFileNameA
CreateMutexA
CompareStringA
TlsGetValue
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ