Static task
static1
Behavioral task
behavioral1
Sample
93b859b01fc0708453d404be096a68c82dafd8caf9d011a0e555c4f824c7069b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93b859b01fc0708453d404be096a68c82dafd8caf9d011a0e555c4f824c7069b.exe
Resource
win10v2004-20220901-en
General
-
Target
93b859b01fc0708453d404be096a68c82dafd8caf9d011a0e555c4f824c7069b
-
Size
333KB
-
MD5
247d4b617bc860adc99983d87a6b96d2
-
SHA1
5dbda3b99cf2343c30aafafc4b892df093b859fb
-
SHA256
93b859b01fc0708453d404be096a68c82dafd8caf9d011a0e555c4f824c7069b
-
SHA512
ef4f90eb631aedf921e417c694c900fe389889c000b34fbab744e1465a5fa3bbce69fa8853b0cab68a286af5671af17d5a158ae0403bf6a59e7c8216b568fc96
-
SSDEEP
6144:TjaY4WdVoiJ/LolOQ0QTBtuzeVhI0eNmlnQ0k2hwT:faY4woiFLMOQxSzkOwQkwT
Malware Config
Signatures
Files
-
93b859b01fc0708453d404be096a68c82dafd8caf9d011a0e555c4f824c7069b.exe windows x86
ef7db70153b89aa135a84fc4405bd5f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__dllonexit
_purecall
_CxxThrowException
_ftol
memmove
free
_initterm
memset
_errno
strchr
malloc
_adjust_fdiv
memcpy
strcmp
??1type_info@@UAE@XZ
_onexit
strlen
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
ntdll
NtSetVolumeInformationFile
NtQueryObject
NtReleaseSemaphore
NtQueryQuotaInformationFile
NtGetPlugPlayEvent
NtQueryMultipleValueKey
NtDeleteKey
NtSetQuotaInformationFile
NtOpenProcessToken
NtQueryIoCompletion
NtQueryVolumeInformationFile
kernel32
InitializeCriticalSection
OpenMutexW
GetConsoleCP
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentDirectoryA
InterlockedDecrement
CreateMutexW
OpenEventA
GetProcessHeap
FindResourceExW
GetACP
CloseHandle
GetComputerNameExW
GetThreadLocale
OpenSemaphoreA
OpenSemaphoreW
LocalFree
GetLastError
TlsSetValue
GetSystemDefaultLangID
DisableThreadLibraryCalls
DeleteFileA
GetVersion
GetSystemDefaultLCID
GetVolumeInformationW
lstrcpynW
GetSystemDefaultUILanguage
FindResourceW
WriteFile
CreateFileW
GetUserDefaultUILanguage
FindNextFileA
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
AreFileApisANSI
LCMapStringW
lstrlenW
InterlockedIncrement
GetSystemTime
InterlockedExchange
GlobalFree
CreateMutexA
HeapAlloc
SetFileAttributesW
InterlockedCompareExchange
GetModuleHandleA
IsSystemResumeAutomatic
GetFileAttributesW
GlobalAlloc
FreeEnvironmentStringsA
lstrcpyW
CreateEventA
lstrcmpiW
SetEvent
CreateThread
LoadLibraryA
CreateEventW
CreateSemaphoreW
GetEnvironmentStringsA
FindAtomA
ReleaseSemaphore
AddAtomA
LocalAlloc
CreateSemaphoreA
GlobalMemoryStatusEx
ReadFile
QueryPerformanceCounter
GetModuleHandleW
GetTickCount
PulseEvent
GetCurrentThreadId
GetCurrentProcessId
GetProcessHeaps
Sleep
GetSystemTimeAsFileTime
TerminateProcess
VirtualAlloc
GetCurrentProcess
GetOEMCP
HeapCreate
UnhandledExceptionFilter
TlsAlloc
SetUnhandledExceptionFilter
FindClose
OpenMutexA
GetDriveTypeW
GetLogicalDriveStringsW
GetStdHandle
lstrcmpW
MultiByteToWideChar
ReleaseMutex
ExpandEnvironmentStringsW
GetLocaleInfoW
FreeLibrary
TlsGetValue
GetProcAddress
GetConsoleAliasExesLengthA
GetUserDefaultLCID
GetCommandLineA
FindResourceExA
FindResourceA
GetVersionExA
LoadLibraryW
HeapDestroy
GetStartupInfoA
WaitForSingleObject
GetUserDefaultLangID
SystemTimeToFileTime
FormatMessageW
user32
DispatchMessageW
CharNextW
GetDesktopWindow
PostThreadMessageW
SendMessageA
GetClipboardViewer
LoadStringW
GetProcessDefaultLayout
GetClipboardOwner
GetInputState
ShowWindow
GetCaretBlinkTime
EnumWindows
FindWindowExA
GetMessageA
TranslateMessage
LoadBitmapA
LoadMenuA
PostQuitMessage
GetActiveWindow
wsprintfW
UpdateWindow
GetDoubleClickTime
PeekMessageW
CreateWindowExA
CountClipboardFormats
GetCapture
GetForegroundWindow
FindWindowA
MsgWaitForMultipleObjects
advapi32
RegOpenKeyExA
GetLengthSid
IsValidSid
ConvertStringSidToSidW
ConvertSidToStringSidW
EqualSid
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
CopySid
RegEnumKeyExA
LookupAccountNameW
LookupAccountSidW
RegQueryValueExA
ReportEventW
DeregisterEventSource
RegisterEventSourceW
RegOpenKeyExW
RegSetValueExW
netapi32
NetUserGetInfo
NetGetDCName
NetApiBufferFree
ole32
CoCreateGuid
CoUninitialize
CoInitializeEx
CoCreateInstance
secur32
TranslateNameW
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 25KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ