Static task
static1
Behavioral task
behavioral1
Sample
09e7217dc42e0796368f3c5f13d165e14efd205bc7818f2bec24f5d77bfe6f2d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
09e7217dc42e0796368f3c5f13d165e14efd205bc7818f2bec24f5d77bfe6f2d.exe
Resource
win10v2004-20220812-en
General
-
Target
09e7217dc42e0796368f3c5f13d165e14efd205bc7818f2bec24f5d77bfe6f2d
-
Size
83KB
-
MD5
4d5e83a2d143b735d8ba674ed695f709
-
SHA1
8447d71e45ea1183813d71f8012ce92fc71e05e8
-
SHA256
09e7217dc42e0796368f3c5f13d165e14efd205bc7818f2bec24f5d77bfe6f2d
-
SHA512
25cad9ccde1cabfa102bf8e42cd00cd57dd9fe8e5ce0f111fdfd7273da65d7c179c1f9343a7860ee02f28767bb07727a5f23572ed77073373d3010450a510702
-
SSDEEP
1536:auEqciec8Kkjmftrmwmd03tks/uwqc+Jv5tTdogT1kCQlwhGiFHrwHewV3Nn2kDo:auEqci38K1mw///Svrxoaf8whFlqea3+
Malware Config
Signatures
Files
-
09e7217dc42e0796368f3c5f13d165e14efd205bc7818f2bec24f5d77bfe6f2d.exe windows x86
2c1d1fca4bf13877a8b5136726c2d6dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_wcsicmp
wcslen
wcschr
strtoul
_ltow
atol
strncpy
isupper
memcpy
_snprintf
wcscat
_itow
malloc
_snwprintf
_onexit
free
_adjust_fdiv
_except_handler3
sprintf
memmove
strncmp
wcscmp
bsearch
qsort
_ultoa
_initterm
_wcsnicmp
isxdigit
isdigit
wcscpy
_ltoa
__dllonexit
user32
wsprintfW
MessageBoxW
MessageBoxA
wsprintfA
LoadStringW
LoadStringA
GetSystemMetrics
GetProcessDefaultLayout
adsldpc
ADsFreeColumn
msasn1
ASN1BERDecS32Val
ASN1BERDecBitString2
ASN1BEREncBool
ASN1BERDecOctetString
ASN1_CloseModule
ASN1BERDecOpenType
ASN1BEREncCharString
ASN1CEREncGeneralizedTime
ASN1BEREncUTF8String
ASN1CEREncUTCTime
ASN1utf8string_free
ASN1BERDecChar32String
ASN1BERDecExplicitTag
ASN1DecSetError
ASN1octetstring_free
ASN1BERDecOctetString2
ASN1EncSetError
ASN1BERDotVal2Eoid
ASN1CEREncBeginBlk
ASN1BERDecObjectIdentifier2
ASN1BEREncBitString
ASN1_CreateModule
ASN1BEREncSX
ASN1ztcharstring_free
ASN1BERDecChar16String
ASN1BERDecNotEndOfContents
ASN1Free
ASN1_Encode
ASN1_FreeEncoded
ASN1CEREncNewBlkElement
ASN1BERDecBool
ASN1BERDecBitString
ASN1DecRealloc
ASN1BEREncOctetString
ASN1charstring_free
ASN1_CloseEncoder
ASN1BERDecMultibyteString
ASN1BERDecGeneralizedTime
ASN1BEREoid2DotVal
ASN1BEREncMultibyteString
ASN1BERDecU32Val
ASN1_CloseDecoder
ASN1BEREncS32
ASN1BERDecEoid
ASN1BEREncU32
ASN1BEREoid_free
ASN1objectidentifier2_cmp
ASN1BEREncOpenType
ASN1char16string_free
ASN1open_free
ASN1BERDecEndOfContents
ASN1BERDecCharString
ASN1BEREncChar16String
ASN1BERDecPeekTag
ASN1BEREncExplicitTag
ASN1intx_free
ASN1_CreateDecoder
ASN1_SetEncoderOption
ASN1_FreeDecoded
ASN1char32string_free
ASN1BERDecUTF8String
ASN1BEREncChar32String
ASN1bitstring_free
ASN1BERDecZeroCharString
ASN1BERDecOpenType2
ASN1BEREncObjectIdentifier2
ASN1BEREncEndOfContents
ASN1CEREncFlushBlkElement
ASN1_CreateEncoder
ASN1CEREncEndBlk
ASN1_Decode
ASN1BERDecUTCTime
ASN1BERDecSXVal
ASN1BEREncEoid
rpcrt4
RpcBindingSetAuthInfoExW
UuidCreate
RpcRevertToSelf
UuidToStringA
RpcStringFreeW
RpcEpResolveBinding
RpcBindingFree
RpcBindingFromStringBindingA
RpcImpersonateClient
RpcStringFreeA
RpcStringBindingComposeA
NdrClientCall2
RpcStringBindingComposeW
RpcBindingFromStringBindingW
advapi32
CryptAcquireContextA
CryptImportKey
ControlService
InitializeSecurityDescriptor
StartServiceA
OpenSCManagerW
CryptGenRandom
RegGetKeySecurity
GetSidSubAuthorityCount
GetLengthSid
RegOpenKeyExW
OpenServiceW
GetSidSubAuthority
CryptExportKey
CryptDestroyKey
A_SHAFinal
CryptGetHashParam
LookupPrivilegeValueA
RegCreateKeyExA
MD5Update
RegSetValueExW
RegEnumKeyA
CryptHashData
GetSidIdentifierAuthority
CryptEncrypt
CryptGenKey
OpenThreadToken
RegQueryInfoKeyA
RegSetKeySecurity
SystemFunction040
FreeSid
UnlockServiceDatabase
RegEnumKeyExA
CryptVerifySignatureA
QueryServiceStatus
CryptGetDefaultProviderW
SetSecurityDescriptorGroup
LookupAccountSidW
RegQueryValueExW
AllocateAndInitializeSid
RegQueryValueExA
SetSecurityDescriptorDacl
GetUserNameW
RegCreateKeyExW
RegEnumValueA
CryptGetUserKey
RegConnectRegistryA
CryptSignHashA
LsaNtStatusToWinError
CryptSetProviderA
RegNotifyChangeKeyValue
SetSecurityDescriptorOwner
CryptGetKeyParam
OpenProcessToken
EqualSid
AddAccessAllowedAce
MD5Final
RegOpenKeyExA
InitializeAcl
CloseServiceHandle
RegDeleteKeyA
CryptDeriveKey
QueryServiceConfigA
MD5Init
ChangeServiceConfigA
GetTokenInformation
GetUserNameA
CryptDecrypt
CopySid
SystemFunction041
CryptDestroyHash
CryptCreateHash
RegDeleteKeyW
RegEnumKeyExW
IsValidSid
GetSecurityDescriptorDacl
CryptReleaseContext
AdjustTokenPrivileges
CryptSetHashParam
GetSecurityDescriptorOwner
A_SHAUpdate
A_SHAInit
CryptSetProvParam
GetAce
RegConnectRegistryW
RegDeleteValueW
RegEnumValueW
CryptSetKeyParam
StartServiceW
CryptGetProvParam
RegDeleteValueA
LockServiceDatabase
RegCloseKey
RegSetValueExA
RegQueryInfoKeyW
kernel32
TerminateProcess
FindFirstFileW
GetTimeFormatA
FindFirstFileA
ExpandEnvironmentStringsW
lstrcmpA
CreateDirectoryW
GetModuleFileNameA
DelayLoadFailureHook
GetTempFileNameA
OpenFileMappingW
ExitThread
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
lstrlenA
VirtualAlloc
lstrcatA
CompareStringA
GetACP
LoadLibraryA
SetFileAttributesA
SetEndOfFile
LocalFree
CreateFileMappingW
MultiByteToWideChar
OpenEventA
FileTimeToSystemTime
lstrcpyA
GetEnvironmentVariableA
Sleep
GetFileAttributesExW
GetDateFormatW
GetSystemDefaultLangID
ReleaseMutex
GetFileAttributesA
LocalAlloc
FreeLibraryAndExitThread
GetModuleHandleA
LocalSize
FormatMessageW
GetLocalTime
WaitForMultipleObjectsEx
GetFileAttributesW
CreateThread
DuplicateHandle
FindNextFileW
CreateMutexW
SetFileAttributesW
GetCurrentProcessId
CreateMutexA
OpenMutexA
GetUserDefaultLCID
GetTimeFormatW
LocalReAlloc
FindCloseChangeNotification
GetDateFormatA
GetModuleFileNameW
CreateDirectoryA
FindNextChangeNotification
WaitForSingleObjectEx
PulseEvent
SetFilePointer
GetFileSize
OpenMutexW
ReadFile
GetComputerNameA
UnmapViewOfFile
GetComputerNameW
CreateEventA
FileTimeToLocalFileTime
OutputDebugStringA
CreateFileA
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryExW
TlsGetValue
GetTickCount
QueryPerformanceCounter
SetEvent
FindFirstChangeNotificationA
MapViewOfFile
WriteFile
TlsAlloc
TlsFree
CreateFileMappingA
FindFirstChangeNotificationW
SystemTimeToFileTime
GetSystemTime
DeleteFileA
GetLastError
DeleteFileW
lstrlenW
InterlockedDecrement
LoadLibraryExA
UnhandledExceptionFilter
GetCurrentProcess
CompareStringW
FindClose
FormatMessageA
GetProcAddress
CloseHandle
SetLastError
EnterCriticalSection
SetUnhandledExceptionFilter
LeaveCriticalSection
GetTempPathA
WaitForSingleObject
InterlockedCompareExchange
GetCurrentThreadId
InterlockedIncrement
FreeLibrary
TlsSetValue
GetVersionExA
InterlockedExchange
CreateFileW
CompareFileTime
GetCurrentThread
Sections
.textbss Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE