Static task
static1
Behavioral task
behavioral1
Sample
43671213e8786d2f3ad9bd7db3b47fca31b3dac1186b7af1639958a3f83d6dc9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
43671213e8786d2f3ad9bd7db3b47fca31b3dac1186b7af1639958a3f83d6dc9.exe
Resource
win10v2004-20221111-en
General
-
Target
43671213e8786d2f3ad9bd7db3b47fca31b3dac1186b7af1639958a3f83d6dc9
-
Size
110KB
-
MD5
69b5dc868fd87d285e3e346d92775200
-
SHA1
a4db49c16ffc1b370f20b4412fde809a8392a672
-
SHA256
43671213e8786d2f3ad9bd7db3b47fca31b3dac1186b7af1639958a3f83d6dc9
-
SHA512
b7cb49ca0a89f11fc4a4d5124f1edb7fb7f78f76c3975702a33dfa28c2df8e810a9cb14c0d69d094e3120a43c1fd75ca857111211d7c739772495aea4f0600d5
-
SSDEEP
1536:/REdVIovpWI3UvWPSWtddYO4nXdopNcNK3gFsdYENmQS8nxaMsY:LovMI3UvW6WtrYOOd1K3gFm4v
Malware Config
Signatures
Files
-
43671213e8786d2f3ad9bd7db3b47fca31b3dac1186b7af1639958a3f83d6dc9.exe windows x86
dbb48cb901a600a9a75eb30fd845debc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
MsgWaitForMultipleObjects
LoadStringW
SendMessageW
EnableWindow
PeekMessageW
DispatchMessageW
IsWindow
GetSystemMetrics
ShowCursor
LoadCursorW
SetCursor
LoadImageW
LoadBitmapW
RegisterClipboardFormatW
GetParent
wsprintfW
LoadIconW
PostMessageW
SetDlgItemTextW
SetFocus
InvalidateRect
UpdateWindow
WinHelpW
SetWindowLongW
advapi32
InitializeSecurityDescriptor
SetFileSecurityW
InitializeAcl
GetAce
LookupAccountSidW
RegSetValueExA
RegSetValueExW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
AddAccessAllowedAce
utildll
StrConnectState
StrAsyncConnectState
kernel32
GetProcessAffinityMask
OpenProcess
MultiByteToWideChar
GetThreadTimes
GetModuleHandleA
GetPriorityClass
lstrcmpW
SetEvent
CreateEventW
Sleep
FreeLibrary
SetProcessAffinityMask
LoadLibraryA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentDirectoryW
SetUnhandledExceptionFilter
GetTickCount
HeapSize
GetProcAddress
GetNumberFormatW
HeapReAlloc
lstrlenW
GetCurrentProcess
SetPriorityClass
GetCommandLineW
GetStartupInfoW
GetModuleHandleW
ExitProcess
CreateMutexW
GetCurrentProcessId
ProcessIdToSessionId
ReleaseMutex
SetProcessShutdownParameters
WaitForSingleObject
ExpandEnvironmentStringsW
CreateProcessW
GetCurrentThreadId
FormatMessageW
GetVersionExW
GetLocaleInfoW
LocalAlloc
LocalFree
HeapFree
HeapAlloc
GetProcessHeap
CreateThread
CloseHandle
lstrcpynW
lstrcpyW
GetLastError
LoadLibraryW
InterlockedCompareExchange
GetVersionExA
IsBadWritePtr
SetLastError
GetCurrentThread
DelayLoadFailureHook
UnhandledExceptionFilter
rasapi32
RasDeleteEntryW
RasSetAutodialAddressW
RasRenameEntryW
RasEnumConnectionsW
RasHangUpW
RasGetConnectStatusW
RasValidateEntryNameW
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sec0 Size: 1000B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sec1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sec2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sec3 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sec4 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sec5 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.datx Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.inte Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ