Static task
static1
Behavioral task
behavioral1
Sample
61d6b18885fd340c4d4184f811b5eaab2d3b795355634784f0c29663255e622f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61d6b18885fd340c4d4184f811b5eaab2d3b795355634784f0c29663255e622f.exe
Resource
win10v2004-20220812-en
General
-
Target
61d6b18885fd340c4d4184f811b5eaab2d3b795355634784f0c29663255e622f
-
Size
830KB
-
MD5
432bfebf318e1a817d59d47face89e92
-
SHA1
25922e89ee01af88a32e3dac7b18232fd2ceb812
-
SHA256
61d6b18885fd340c4d4184f811b5eaab2d3b795355634784f0c29663255e622f
-
SHA512
0bd77c7d641153feed07faf3c825e2b070ee65a241009a615bf7cc4771914c07c9defd19839f977fb8d561d417898466d5024d6c8f61692070d69ac5c6ce934c
-
SSDEEP
24576:kkz0drhNKD8gFt/qLzlsbZcrbBFOc97MjNgzVR:kkAdH63jqL6VcrVFOc9QjNgzVR
Malware Config
Signatures
Files
-
61d6b18885fd340c4d4184f811b5eaab2d3b795355634784f0c29663255e622f.exe windows x86
3eb26225eb97432430cac130585cc5da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
InitializeAcl
TraceMessage
RegSetValueExA
StartTraceW
StartServiceCtrlDispatcherW
RemoveUsersFromEncryptedFile
CryptCreateHash
AddAccessAllowedAceEx
EqualPrefixSid
RegOpenKeyExA
RegNotifyChangeKeyValue
AreAnyAccessesGranted
RegSaveKeyW
FreeSid
LsaLookupPrivilegeValue
AddAccessAllowedObjectAce
InitiateSystemShutdownW
RegOverridePredefKey
OpenTraceW
RegCreateKeyExA
kernel32
SetConsoleTextAttribute
GetFileTime
VirtualAlloc
IsBadStringPtrW
DeleteTimerQueueTimer
GetLocalTime
GetComputerNameA
GetModuleHandleW
SetProcessPriorityBoost
GetFileInformationByHandle
DeleteTimerQueueEx
Sleep
EnumSystemLanguageGroupsA
ContinueDebugEvent
RemoveDirectoryW
GetTapeParameters
LoadResource
GetSystemDirectoryA
SetLocalTime
iphlpapi
GetAdaptersInfo
InternalCreateIpForwardEntry
GetInterfaceInfo
FlushIpNetTable
GetBestInterface
NhGetInterfaceNameFromGuid
ulib
??1PATH_ARGUMENT@@UAE@XZ
??0KEYBOARD@@QAE@XZ
?GetWSTR@WSTRING@@QBEPBGXZ
?Display@MESSAGE@@QAAEPBDZZ
?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z
?DeleteAllMembers@SEQUENTIAL_CONTAINER@@UAEEXZ
netapi32
NetUseEnum
NetLocalGroupGetInfo
NetGetAnyDCName
NetLocalGroupGetMembers
NetGroupDel
NetFileEnum
NetUseDel
NetLocalGroupAddMembers
NetSessionDel
NetStatisticsGet
NetLocalGroupSetInfo
NetDfsSetClientInfo
NetValidateName
DsRoleGetPrimaryDomainInformation
Netbios
NetWkstaUserEnum
NetGroupGetUsers
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wDfcH Size: 641KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ