Static task
static1
Behavioral task
behavioral1
Sample
833273f638448a364346cf9a521138f3443a627266b2213b6a1b8eff77d633c4.exe
Resource
win7-20221111-en
General
-
Target
833273f638448a364346cf9a521138f3443a627266b2213b6a1b8eff77d633c4
-
Size
143KB
-
MD5
1a0dcfc638950dc356040975589fbc90
-
SHA1
1e5c288b833f69ea77cfa4140033b4d3d95ac441
-
SHA256
833273f638448a364346cf9a521138f3443a627266b2213b6a1b8eff77d633c4
-
SHA512
3c35fd9e93ec665fc196126e6de267eda6a7514be9b815d4e9e09b2501d1677e2833141f951bed21988c8558f81bf63156943d5d22aaf95aa5075884235dc40e
-
SSDEEP
3072:c4+XvG9WpUPZAxt0gT5Y11EwdO6WM/zeQBFgv12ax4NdGb:c4ofkAg715hWM5Fgv1b4jGb
Malware Config
Signatures
Files
-
833273f638448a364346cf9a521138f3443a627266b2213b6a1b8eff77d633c4.exe windows x86
fb854369fb6502c7649553725a2b22de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
SetupDiCreateDeviceInfoList
SetupDiSetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiRegisterDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
SetupDiChangeState
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiGetClassDevsW
SetupDiBuildDriverInfoList
SetupDiSetSelectedDevice
SetupDiGetDeviceInstallParamsW
SetupDiCallClassInstaller
SetupDiGetINFClassW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInfoListDetailW
SetupDiGetSelectedDriverW
SetupDiCreateDevRegKeyW
SetupDiGetDeviceRegistryPropertyW
kernel32
WideCharToMultiByte
FreeLibrary
GetProcAddress
GetSystemDirectoryW
lstrlenW
LoadLibraryW
GetLastError
MultiByteToWideChar
DeleteFileW
FindClose
GetEnvironmentStringsW
SetLastError
FindNextFileW
GetTempPathW
Sleep
GetVersionExW
RemoveDirectoryW
FindFirstFileW
LocalFree
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
LoadLibraryA
CreateDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
GetCurrentThreadId
TlsFree
ExitProcess
VirtualAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
EnterCriticalSection
advapi32
GetSecurityDescriptorDacl
InitializeAcl
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
GetAce
RegQueryValueExW
GetSecurityDescriptorGroup
GetSecurityDescriptorSacl
LookupAccountNameW
IsValidSid
SetNamedSecurityInfoW
GetLengthSid
AddAce
CopySid
SetSecurityInfo
GetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorLength
GetAclInformation
MakeSelfRelativeSD
RegOpenKeyExW
RegSetValueExW
RegCloseKey
shell32
SHGetFolderPathW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
oleaut32
VarBstrCat
SysStringLen
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysAllocString
SysFreeString
shlwapi
PathAppendW
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rrdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE