Static task
static1
Behavioral task
behavioral1
Sample
d0428d173a4bc7754604343bd5040c03a7fb2253b752953bc23845a02c891542.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d0428d173a4bc7754604343bd5040c03a7fb2253b752953bc23845a02c891542.exe
Resource
win10v2004-20221111-en
General
-
Target
d0428d173a4bc7754604343bd5040c03a7fb2253b752953bc23845a02c891542
-
Size
849KB
-
MD5
e5fd892775728092b60d10e553b9a6af
-
SHA1
baecdb8be452ca9208ee6c569380f088cff64339
-
SHA256
d0428d173a4bc7754604343bd5040c03a7fb2253b752953bc23845a02c891542
-
SHA512
e7f13f458a05f6e5682f19a24910b3dc509dc5e208f591de165d80336bbbe463e668fb3dc666515ab0f701cfae75c2e062b914ec5099a3d3599ccfaf3a0b9da3
-
SSDEEP
12288:CKRAE8dI829eDwi97pekvmy8It47OcTLtcBfpcHveMW4I0IPBMYkH+RD3d4QiLG8:P+dMED3jzpKOcNcBQA4zu2beZt/HyG8
Malware Config
Signatures
Files
-
d0428d173a4bc7754604343bd5040c03a7fb2253b752953bc23845a02c891542.exe windows x86
324a28129c6176ac73725b1c917a4b94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntmarta
AccFreeIndexArray
AccRewriteGetHandleRights
AccProvHandleGetAccessInfoPerObjectType
AccProvGetOperationResults
AccProvGetAccessInfoPerObjectType
AccLookupAccountTrustee
AccSetEntriesInAList
AccGetExplicitEntries
AccGetAccessForTrustee
AccProvGetAllRights
AccRewriteSetNamedRights
AccProvHandleRevokeAuditRights
AccRewriteSetEntriesInAcl
EventGuidToName
AccConvertAccessToSecurityDescriptor
AccProvHandleRevokeAccessRights
AccConvertAccessMaskToActrlAccess
AccProvGetTrusteesAccess
AccProvCancelOperation
AccProvHandleGrantAccessRights
AccLookupAccountName
AccProvHandleIsAccessAudited
AccRewriteGetNamedRights
AccProvSetAccessRights
gdi32
EngGetCurrentCodePage
SetColorAdjustment
GetEnhMetaFileW
GetBitmapDimensionEx
PolyPolygon
IntersectClipRect
GetKerningPairsW
SetColorSpace
PlayMetaFileRecord
Ellipse
GetDCBrushColor
RestoreDC
GetGlyphIndicesA
GetDCPenColor
GetColorSpace
AnimatePalette
CreateRoundRectRgn
GdiEntry11
FONTOBJ_cGetGlyphs
PaintRgn
ole32
CoReactivateObject
HMETAFILE_UserSize
HDC_UserFree
STGMEDIUM_UserUnmarshal
CoRevokeClassObject
CoUnmarshalHresult
HENHMETAFILE_UserMarshal
WdtpInterfacePointer_UserSize
CoInitializeEx
HBRUSH_UserUnmarshal
HENHMETAFILE_UserSize
CoWaitForMultipleHandles
HENHMETAFILE_UserUnmarshal
CoGetMarshalSizeMax
IsValidInterface
CLIPFORMAT_UserUnmarshal
OleGetClipboard
RevokeDragDrop
OleDoAutoConvert
CoTaskMemRealloc
msacm32
acmMetrics
acmFormatChooseA
acmDriverID
acmFormatChooseW
acmFormatEnumA
acmDriverEnum
XRegThunkEntry
acmFormatEnumW
acmDriverOpen
acmFormatTagDetailsA
acmDriverAddW
acmFilterDetailsW
acmFormatTagDetailsW
acmFilterTagDetailsA
acmDriverClose
acmMessage32
kernel32
WritePrivateProfileSectionW
MapViewOfFile
CreateProcessInternalA
GetDriveTypeW
SetConsoleNumberOfCommandsW
GetCurrentConsoleFont
WriteConsoleW
SetFileValidData
UnlockFileEx
WriteConsoleOutputW
GetModuleHandleW
GlobalFindAtomW
GetCommState
LoadLibraryA
SetEvent
GetLongPathNameA
QueueUserAPC
LocalFlags
TlsSetValue
GetWindowsDirectoryW
HeapCreate
VirtualAlloc
GetConsoleAliasesLengthA
SetPriorityClass
InitializeCriticalSection
AttachConsole
GetSystemTime
GetTapeParameters
Sections
.text Size: 725KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ