Static task
static1
Behavioral task
behavioral1
Sample
74f9b1d1d4328a3ef47f38cfebdebe26253b294557242d9d162a537e2520f276.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74f9b1d1d4328a3ef47f38cfebdebe26253b294557242d9d162a537e2520f276.exe
Resource
win10v2004-20221111-en
General
-
Target
74f9b1d1d4328a3ef47f38cfebdebe26253b294557242d9d162a537e2520f276
-
Size
45KB
-
MD5
8c35ca0f4f101f0f8d2d93ef0079b652
-
SHA1
9e61ff629cc73327c3c8948f8b0ed00225e80c9a
-
SHA256
74f9b1d1d4328a3ef47f38cfebdebe26253b294557242d9d162a537e2520f276
-
SHA512
cc30abfddb038e273e22aa35b1e8de414755550ee988dbf87a018dd789ac5bbbe628d840b2fd16aebb8f9ce6d272f85e56b189c675a9e686468b37183eecce68
-
SSDEEP
768:nSj4ey8nl4jbeeXRw8Fxa7bLL3LsYdAVHzyQJbj99Dz:nW41+0bemRwaxwbLkYdAVHzBJbPz
Malware Config
Signatures
Files
-
74f9b1d1d4328a3ef47f38cfebdebe26253b294557242d9d162a537e2520f276.exe windows x86
74ef77ae6da8f0db66f175fffdcecef6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
LdrFindResourceEx_U
RtlMultiByteToUnicodeN
RtlAppendUnicodeToString
RtlpNotOwnerCriticalSection
ZwCreateMailslotFile
NtQueryInformationPort
NtEnumerateKey
RtlSetUserValueHeap
RtlFindSetBitsAndClear
NtQueryIoCompletion
RtlPcToFileHeader
NtFlushInstructionCache
LdrAccessResource
NtFlushKey
NtGetContextThread
ZwQueryInformationAtom
bsearch
ZwCreateSemaphore
RtlLargeIntegerAdd
ZwCreateWaitablePort
ZwQueryInformationToken
RtlFirstEntrySList
RtlCopySid
RtlTimeFieldsToTime
RtlIntegerToUnicodeString
NtCompleteConnectPort
RtlLargeIntegerSubtract
NtWriteVirtualMemory
ZwReleaseSemaphore
RtlActivateActivationContextEx
ZwSecureConnectPort
NtEnumerateSystemEnvironmentValuesEx
RtlDosSearchPath_Ustr
RtlStartRXact
ZwClearEvent
ZwProtectVirtualMemory
RtlLargeIntegerArithmeticShift
RtlQueryProcessHeapInformation
RtlCompareString
RtlSystemTimeToLocalTime
DbgPrint
NtCreateSection
RtlNtStatusToDosError
NtOpenProcessToken
isspace
RtlQueryEnvironmentVariable_U
LdrGetProcedureAddress
RtlFindActivationContextSectionString
NtSuspendProcess
ZwQueryInformationPort
RtlInsertElementGenericTable
RtlGetLastNtStatus
NtReadVirtualMemory
_atoi64
CsrCaptureMessageString
ZwSetInformationJobObject
NtSetHighWaitLowEventPair
LdrFindResource_U
RtlQueryInformationAcl
RtlAppendStringToString
NtCreateEvent
ZwPowerInformation
kernel32
EnumDateFormatsExW
CloseHandle
FindAtomW
GetPrivateProfileSectionNamesA
HeapWalk
GetStartupInfoA
DeleteCriticalSection
GetFileSizeEx
SetThreadPriority
GetTapeParameters
IsDBCSLeadByteEx
LocalReAlloc
OpenMutexW
OpenThread
SetHandleInformation
GetModuleHandleA
CancelWaitableTimer
VirtualAlloc
SetMessageWaitingIndicator
GetACP
FatalExit
IsDebuggerPresent
WideCharToMultiByte
ContinueDebugEvent
GetWindowsDirectoryA
GetNumaAvailableMemoryNode
GetFileAttributesW
GetGeoInfoW
RegisterConsoleIME
SetThreadIdealProcessor
CopyFileExW
BackupWrite
GlobalAlloc
LoadLibraryA
SetLastError
MultiByteToWideChar
dnsapi
Dns_ParsePacketRecord
Dns_InitializeMsgRemoteSockaddr
DnsStatusString
DnsRecordListFree
DnsCopyStringEx
DnsApiHeapReset
Dns_PingAdapterServers
Dns_CreateSocket
DnsNameCompareEx_A
DnsRecordCompare
DnsRecordCopyEx
DnsDowncaseDnsNameLabel
DnsRegisterClusterAddress
Dns_ResetNetworkInfo
QueryDirectEx
DnsReplaceRecordSetUTF8
DnsFindAuthoritativeZone
DnsValidateName_UTF8
Dns_BuildPacket
DnsWriteQuestionToBuffer_W
DnsWriteReverseNameStringForIpAddress
GetCurrentTimeInSeconds
DnsQueryConfigDword
DnsIpv6AddressToString
DnsNotifyResolverEx
Dns_SkipToRecord
DnsFlushResolverCacheEntry_W
NetInfo_Build
DnsNameCompareEx_W
DnsNotifyResolverClusterIp
DnsIpv6StringToAddress
DnsReplaceRecordSetW
DnsRecordStringForWritableType
Query_Main
Dns_OpenTcpConnectionAndSend
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ