Static task
static1
Behavioral task
behavioral1
Sample
b4e4eda8004c8447a0fa5b59cb68d31ae34728725427c0227821cf36aad29693.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4e4eda8004c8447a0fa5b59cb68d31ae34728725427c0227821cf36aad29693.exe
Resource
win10v2004-20220812-en
General
-
Target
b4e4eda8004c8447a0fa5b59cb68d31ae34728725427c0227821cf36aad29693
-
Size
271KB
-
MD5
cc297758c224b22d11b902c568dd3f29
-
SHA1
b5b5c1c7ab4cc994518c4eb419cc85cdc36dbfc5
-
SHA256
b4e4eda8004c8447a0fa5b59cb68d31ae34728725427c0227821cf36aad29693
-
SHA512
3570c700462ea5a0a9bfb84a351b624945c4296b442d055bb1caa7f8c01dbb83bc264f02b47c1064c9faaacd029a08ab39779de73062f3fd5e2d90f5001da199
-
SSDEEP
6144:v0aMiwJ17lAhHxz9NceB7oIjZFWuQi4wd1oDL:vKJ1JAjBBjZFWvi4ws
Malware Config
Signatures
Files
-
b4e4eda8004c8447a0fa5b59cb68d31ae34728725427c0227821cf36aad29693.exe windows x86
bf29b8472f9e3c9bf48e88a2fcd3d5ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumDisplaySettingsW
CharNextW
wsprintfW
GetDesktopWindow
GetSystemMetrics
mpr
WNetGetUniversalNameW
iphlpapi
GetAdaptersInfo
ole32
CoCreateGuid
IIDFromString
CoCreateInstance
CoTaskMemFree
StringFromIID
CoTaskMemAlloc
StringFromCLSID
CLSIDFromString
CoTaskMemRealloc
kernel32
GetSystemTime
RaiseException
CreateMutexW
GetDriveTypeW
VirtualQuery
LoadLibraryExW
TlsFree
CreateIoCompletionPort
GetDiskFreeSpaceExW
TlsSetValue
GetSystemInfo
UnmapViewOfFile
SizeofResource
GetFileAttributesExW
CreateEventA
GetWindowsDirectoryW
FindFirstFileW
ExpandEnvironmentStringsW
CreateWaitableTimerA
FindResourceW
GetLongPathNameW
SetEndOfFile
lstrcmpW
WriteFile
SearchPathW
DeleteFileW
GetQueuedCompletionStatus
GetCurrentThreadId
GlobalMemoryStatusEx
SystemTimeToFileTime
FormatMessageW
CloseHandle
FileTimeToSystemTime
EnterCriticalSection
QueryPerformanceFrequency
GetModuleHandleW
CreateFileW
WaitForMultipleObjects
DeleteCriticalSection
lstrlenA
lstrlenW
SetLastError
ResumeThread
GlobalFree
lstrcmpiW
lstrcmpA
HeapDestroy
ReadProcessMemory
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
WTSGetActiveConsoleSessionId
GetVolumeInformationW
FindFirstFileExW
IsDebuggerPresent
VirtualAlloc
GetTempFileNameW
UnhandledExceptionFilter
ReleaseMutex
TlsAlloc
HeapSize
SetWaitableTimer
HeapAlloc
LockResource
PostQueuedCompletionStatus
MoveFileW
GetFileTime
GetOverlappedResult
MapViewOfFile
RemoveDirectoryW
QueryDosDeviceW
TzSpecificLocalTimeToSystemTime
LoadResource
TlsGetValue
GetUserDefaultLCID
GetFullPathNameW
GetTempPathW
OpenProcess
FormatMessageA
CreateWaitableTimerW
GetFileInformationByHandle
MoveFileExW
CancelWaitableTimer
CreateFileMappingW
GetSystemWow64DirectoryW
SetFilePointerEx
CreateSemaphoreA
HeapReAlloc
GetSystemDirectoryW
WideCharToMultiByte
LocalAlloc
GetProcessHeap
SetFileAttributesW
ReleaseSemaphore
GetFileSizeEx
GetVolumeNameForVolumeMountPointW
GetLocalTime
ReadFile
SystemTimeToTzSpecificLocalTime
WaitForSingleObject
CreateMutexA
FindNextFileW
CreateDirectoryW
DuplicateHandle
FindResourceExW
ResetEvent
HeapFree
DeviceIoControl
GetSystemDefaultUILanguage
CreateProcessW
LocalFileTimeToFileTime
VirtualFree
CreateEventW
GetSystemDefaultLangID
LocalFree
LeaveCriticalSection
CopyFileW
FindClose
FreeLibrary
GetCurrentDirectoryW
oleaut32
VarDateFromStr
VarUI4FromStr
VariantClear
VariantTimeToSystemTime
SysFreeString
VariantCopy
VariantChangeType
SysAllocString
VariantInit
psapi
EnumDeviceDrivers
GetDeviceDriverFileNameW
EnumProcessModules
GetModuleBaseNameW
GetMappedFileNameW
crypt32
CertCloseStore
CertFreeCertificateContext
CryptQueryObject
CertGetNameStringW
CryptMsgClose
CertGetEnhancedKeyUsage
CertNameToStrW
CryptMsgGetParam
CertFindCertificateInStore
rpcrt4
UuidCreate
wintrust
WinVerifyTrust
CryptCATAdminReleaseCatalogContext
CryptCATAdminCalcHashFromFileHandle
WintrustGetRegPolicyFlags
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseContext
CryptCATAdminAcquireContext
CryptCATAdminEnumCatalogFromHash
wininet
InternetGetConnectedState
iassvcs
IASUninitialize
IASSetMaxNumberOfThreads
IASRadiusCrypt
IASGetLocalDictionary
licmgr10
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
Sections
.lyqGsyB Size: 512B - Virtual size: 20KB
IMAGE_SCN_MEM_READ
.mKIIe Size: 1KB - Virtual size: 38KB
IMAGE_SCN_MEM_READ
.PQtF Size: 1024B - Virtual size: 36KB
IMAGE_SCN_MEM_READ
.onHPZUK Size: 512B - Virtual size: 27KB
IMAGE_SCN_MEM_READ
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.YDmfJD Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eICEtB Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.YbsqJ Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.JOkXhDa Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WKmWQ Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zQGwt Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qGxCmc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ