Static task
static1
Behavioral task
behavioral1
Sample
443ec9e6755c1d78b9f4a313ee06860ea1dedbba5a11c90dcb978ac1d295c6ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
443ec9e6755c1d78b9f4a313ee06860ea1dedbba5a11c90dcb978ac1d295c6ea.exe
Resource
win10v2004-20221111-en
General
-
Target
443ec9e6755c1d78b9f4a313ee06860ea1dedbba5a11c90dcb978ac1d295c6ea
-
Size
159KB
-
MD5
c9ec3ef2357528c4c424c988b4f06c83
-
SHA1
2af4b5643ef61b691aefcfbfd0d5ea1a8c12a36d
-
SHA256
443ec9e6755c1d78b9f4a313ee06860ea1dedbba5a11c90dcb978ac1d295c6ea
-
SHA512
3639a4fe0bb6f9a5d3b0f8b2803113c2791bfe4a899222a120090401775052de3f8e56d56833ee14527c1782779ab009eb14fd1ad2e935d5208f72d5948c731d
-
SSDEEP
3072:P5dnu0W5ZyYi+KpM6TWxrtGGF4LNzK70wKv5jc1onf0ohKBtg2LdY:nnxIZhKp1IFMec5uonf5hKBxxY
Malware Config
Signatures
Files
-
443ec9e6755c1d78b9f4a313ee06860ea1dedbba5a11c90dcb978ac1d295c6ea.exe windows x86
4b7cf5131d2e296be23f3a22ab9adc11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
msvcrt
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_vsnwprintf
_vsnprintf
wcsrchr
wcscmp
advapi32
RegEnumValueW
CryptReleaseContext
CryptAcquireContextW
SetFileSecurityW
RegDeleteKeyW
OpenThreadToken
CheckTokenMembership
ConvertStringSecurityDescriptorToSecurityDescriptorW
LookupAccountNameW
AllocateAndInitializeSid
FreeSid
CryptHashData
CryptGetHashParam
CryptCreateHash
CryptDestroyHash
RegisterServiceCtrlHandlerW
RegCloseKey
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
SetThreadToken
RegQueryValueExW
RegNotifyChangeKeyValue
SetServiceStatus
StartServiceCtrlDispatcherW
DuplicateToken
RegDeleteValueW
kernel32
FormatMessageA
GetComputerNameW
GetModuleHandleA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
HeapSize
RaiseException
LoadLibraryA
MoveFileExW
GetLastError
GetModuleFileNameW
CloseHandle
SetEvent
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetDriveTypeW
GetLogicalDrives
lstrcmpW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ExitProcess
InitializeCriticalSection
GetCommandLineW
GetTickCount
ReleaseMutex
ResetEvent
WaitForMultipleObjectsEx
SetErrorMode
CreateEventW
CreateMutexW
CreateProcessW
GetSystemInfo
InterlockedExchange
CreateFileA
ReadFile
SetFilePointer
DosDateTimeToFileTime
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
WideCharToMultiByte
CreateFileW
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
CreateThread
CreateSemaphoreW
VirtualFree
VirtualAlloc
SetFilePointerEx
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
GlobalFree
GlobalAlloc
GetFileAttributesExW
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetTempPathW
GetFileTime
FindNextFileW
LocalFree
GetCurrentThread
CreateDirectoryW
RemoveDirectoryW
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
LocalAlloc
rpcrt4
RpcImpersonateClient
RpcRevertToSelf
RpcServerUnregisterIf
RpcServerUseProtseqEpW
RpcServerRegisterIfEx
NdrServerCall2
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE