Static task
static1
Behavioral task
behavioral1
Sample
7da0ee40cebb1b32c499b9054ccdf3c9fc5d2974eb4ad911aced1391d2d048f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7da0ee40cebb1b32c499b9054ccdf3c9fc5d2974eb4ad911aced1391d2d048f2.exe
Resource
win10v2004-20220812-en
General
-
Target
7da0ee40cebb1b32c499b9054ccdf3c9fc5d2974eb4ad911aced1391d2d048f2
-
Size
719KB
-
MD5
375cc1f29bfdb3663379924b282667bc
-
SHA1
393e445477112ae9e9412532a43aa9478acfa483
-
SHA256
7da0ee40cebb1b32c499b9054ccdf3c9fc5d2974eb4ad911aced1391d2d048f2
-
SHA512
294b9f253ec8fd3f55e30c3ba3a07cc867646e071dc73b8d1b81fd5d91db50825a4fd074d63108f60343183f4255d4eb90c42ea0293437c09c67c03c6c99f744
-
SSDEEP
12288:z7OmmoYOSVGlSB2xVVLyUzSfHihKFBDyxFP4lhn3a4XnjseINO:zxyG0B2xVVHyaKFJyxtSVa4Ie
Malware Config
Signatures
Files
-
7da0ee40cebb1b32c499b9054ccdf3c9fc5d2974eb4ad911aced1391d2d048f2.exe windows x86
a8217a14855982b69b5e2ff84f6fd729
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
ReleaseCapture
CharToOemA
FlashWindowEx
SendMessageW
GetMenuCheckMarkDimensions
SetWindowPos
RegisterHotKey
netapi32
DsRoleFreeMemory
NetValidateName
NetUserChangePassword
NetSessionDel
NetGroupSetInfo
NetServerSetInfo
NetDfsSetClientInfo
NetGroupDel
NetpwPathCompare
DsGetDcNameW
NetUseAdd
NetWkstaUserGetInfo
NetGroupDelUser
NetShareDel
NetSessionEnum
oleaut32
VariantCopy
SysReAllocStringLen
VariantCopyInd
SysAllocStringByteLen
SafeArrayCreate
VariantClear
advapi32
RegisterEventSourceW
SetTokenInformation
RegisterTraceGuidsW
AbortSystemShutdownW
AreAnyAccessesGranted
CryptDuplicateKey
CryptHashData
CryptGenRandom
LsaGetSystemAccessAccount
RegSetValueExA
GetTokenInformation
RegEnumValueA
GetUserNameW
CryptVerifySignatureA
GetSidIdentifierAuthority
kernel32
CreateSemaphoreW
LocalFlags
ProcessIdToSessionId
GlobalAddAtomW
DeleteCriticalSection
GetComputerNameA
CommConfigDialogW
InterlockedIncrement
DeviceIoControl
GetLogicalDriveStringsA
VirtualAlloc
msvcrt
_wpopen
__p___initenv
_time64
_mkdir
qsort
_callnewh
isupper
__argv
__unDName
_mbsicmp
_localtime64
_close
_dup
toupper
_dup2
_mbscmp
putchar
wcscmp
__winitenv
_snprintf
wcscspn
sprintf
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 550KB - Virtual size: 898KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ