Static task
static1
Behavioral task
behavioral1
Sample
b302cdcc2664ed402abec9064db2967417e95d015f10df499a55120ad168198a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b302cdcc2664ed402abec9064db2967417e95d015f10df499a55120ad168198a.exe
Resource
win10v2004-20220812-en
General
-
Target
b302cdcc2664ed402abec9064db2967417e95d015f10df499a55120ad168198a
-
Size
220KB
-
MD5
b4cd94a4dd9ddae7c785d4e1f3efc50a
-
SHA1
b316bc69893e4d239c62584e15328b5f88d2ec71
-
SHA256
b302cdcc2664ed402abec9064db2967417e95d015f10df499a55120ad168198a
-
SHA512
54bc7357658a1b40bc88082cb2de9e39a4a4069c2b9e95a69a406a6b02f7d66c2aecad693e82d16fb6e870f42e8a1b5cad3fe396a8d44515bea80402b9ff7f37
-
SSDEEP
6144:BznQ04n7NGeh4a2h9RY+h48+OhCiES7zoO6:wUeex9t+oE7
Malware Config
Signatures
Files
-
b302cdcc2664ed402abec9064db2967417e95d015f10df499a55120ad168198a.exe windows x86
93355997686ad0d8b2729c0634d16f9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
GetShortPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
lstrcmpiW
GetCommandLineW
SetErrorMode
CopyFileW
lstrcmpW
HeapFree
HeapReAlloc
HeapAlloc
GetComputerNameW
GetLocalTime
GetModuleFileNameW
GetSystemDirectoryW
GetWindowsDirectoryW
WideCharToMultiByte
MultiByteToWideChar
GetTempPathW
GetSystemInfo
GetVersionExW
ExitProcess
GetModuleHandleA
lstrcmpA
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
WaitForSingleObject
GetExitCodeThread
CreateRemoteThread
LoadLibraryW
GetProcAddress
GetCurrentProcess
lstrlenW
lstrcpynW
SetFileAttributesW
GetFileSize
lstrlenA
CloseHandle
WriteFile
ReadFile
CreateFileW
FormatMessageW
LocalAlloc
lstrcpyW
LocalFree
GetLastError
GetProcessHeap
GetStartupInfoA
user32
GetSystemMetrics
wsprintfW
IsCharAlphaW
wsprintfA
advapi32
SetServiceStatus
LsaOpenPolicy
LsaNtStatusToWinError
LookupAccountNameW
LsaAddAccountRights
LsaClose
AllocateAndInitializeSid
LookupAccountSidW
FreeSid
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
OpenSCManagerW
CreateServiceW
OpenServiceW
StartServiceW
CloseServiceHandle
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
shell32
CommandLineToArgvW
wininet
InternetConnectW
HttpOpenRequestW
InternetOpenW
InternetCloseHandle
InternetCrackUrlW
HttpSendRequestW
shlwapi
StrRChrW
StrStrW
netapi32
NetLocalGroupAddMembers
NetUserAdd
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
memcpy
_lrotr
_lrotl
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
memset
strchr
strlen
_CxxThrowException
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
msvcp60
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ