Static task
static1
Behavioral task
behavioral1
Sample
704164b34a186c9f089ce2a825dc2539794e9904aa2866f6eed61a4a33b973f7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
704164b34a186c9f089ce2a825dc2539794e9904aa2866f6eed61a4a33b973f7.exe
Resource
win10v2004-20220812-en
General
-
Target
704164b34a186c9f089ce2a825dc2539794e9904aa2866f6eed61a4a33b973f7
-
Size
326KB
-
MD5
0da8d2297a3b377a0426c901e90cac00
-
SHA1
fec743481719a6cc2c97c7c86874815058406aa5
-
SHA256
704164b34a186c9f089ce2a825dc2539794e9904aa2866f6eed61a4a33b973f7
-
SHA512
bbc9feb8c0db818212f59872b5ae746a08d97ad5bb93758bef443f61f74152468d3a1f4303852fd1dba3a9b91022596694958c55875b9eec9cae3923e398b429
-
SSDEEP
3072:rxiudEbntlNyBLZadj6tu+cOPGLTHfyeIRVFJ5H8Os+AdrNZoPr8BPPqb:rx6lsBLZa56A9aGLTHaJRfDhWdr4Prd
Malware Config
Signatures
Files
-
704164b34a186c9f089ce2a825dc2539794e9904aa2866f6eed61a4a33b973f7.exe windows x86
2d7845797c5c8627969031821d3fd6a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrServerCall2
RpcMgmtStopServerListening
RpcServerListen
RpcServerRegisterAuthInfoW
RpcServerRegisterIf
RpcServerUseProtseqEpW
kernel32
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
GlobalFindAtomW
LoadLibraryW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
lstrlenA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
SetErrorMode
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
lstrcmpW
FreeLibrary
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GetThreadPriority
lstrlenW
GetVersionExW
GetModuleFileNameW
ResumeThread
SuspendThread
SetEvent
CreateEventW
GetExitCodeThread
CreateThread
GetCurrentThread
SetThreadPriority
ResetEvent
GetModuleHandleW
GetCommandLineW
GetLocalTime
DeleteCriticalSection
InitializeCriticalSection
FindClose
FindNextFileW
LeaveCriticalSection
EnterCriticalSection
FindFirstFileW
FindResourceW
LoadResource
LockResource
SizeofResource
GetFileSizeEx
CloseHandle
CreateFileW
Sleep
WaitForSingleObject
GetLastError
GetDiskFreeSpaceW
GetVolumeInformationW
DeviceIoControl
GetStartupInfoA
user32
DestroyMenu
ShowWindow
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DefWindowProcW
CallWindowProcW
CopyRect
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
MessageBoxW
GetSubMenu
GetMenuItemCount
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
LoadCursorW
UnhookWindowsHookEx
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
SendMessageW
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetWindowTextW
GetWindowThreadProcessId
gdi32
GetStockObject
SetViewportExtEx
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
ScaleViewportExtEx
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegDeleteKeyW
RegQueryValueW
RegOpenKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
RegDeleteValueW
DeleteService
QueryServiceStatus
ControlService
OpenServiceW
RegCloseKey
RegSetValueExW
RegCreateKeyW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
RegEnumKeyW
shlwapi
PathFindFileNameW
PathFindExtensionW
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE