Static task
static1
Behavioral task
behavioral1
Sample
884caae17bcd82cf82c195c825bb19df1136d261ea035d781541e53d6352b9d1.exe
Resource
win7-20220812-en
General
-
Target
884caae17bcd82cf82c195c825bb19df1136d261ea035d781541e53d6352b9d1
-
Size
200KB
-
MD5
d4bf2b157731045aed24a9cd9e14d114
-
SHA1
d2ffd655a6f7231061f257aa4c35120e208009b0
-
SHA256
884caae17bcd82cf82c195c825bb19df1136d261ea035d781541e53d6352b9d1
-
SHA512
561a943f450b138a17508f74eed967fbfb52860505cd11bef823b341f576552d8a02d9bb85ee23ed7d8a8fc33efaece6793e0e52c8111752e1f33f360a4aa3b5
-
SSDEEP
3072:u1lqlbKIdjDUGlerFjo05QUv8unT9GPekg7hd9Gxhm7z3TzgTBeqYCwNk605yHzE:4gOIkjoinv5nTDVnGDm77gTtYvVa1
Malware Config
Signatures
Files
-
884caae17bcd82cf82c195c825bb19df1136d261ea035d781541e53d6352b9d1.exe windows x86
abc0f930acd857aeac079415667b941c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsSetValue
LCMapStringA
OutputDebugStringA
OutputDebugStringW
GetStringTypeW
DebugBreak
HeapReAlloc
EnumSystemLanguageGroupsW
GetTimeZoneInformation
IsValidCodePage
WriteConsoleW
CompareFileTime
LCMapStringW
GetStringTypeA
GetLocaleInfoA
GetCPInfo
oleacc
CreateStdAccessibleObject
CreateStdAccessibleProxyA
winmm
sndPlaySoundA
advapi32
LookupAccountSidA
DuplicateTokenEx
AddAce
PrivilegeCheck
InitializeSecurityDescriptor
GetUserNameA
IsValidSecurityDescriptor
QueryServiceStatus
SetSecurityDescriptorOwner
GetSecurityDescriptorLength
RegOpenKeyExW
shlwapi
PathAddBackslashW
shell32
SHChangeNotify
SHGetMalloc
SHGetPathFromIDListW
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ