Static task
static1
Behavioral task
behavioral1
Sample
925d3d3d542eac0af523434eb739f39e3fe37db39250853de6ee7132c42669d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
925d3d3d542eac0af523434eb739f39e3fe37db39250853de6ee7132c42669d8.exe
Resource
win10v2004-20220901-en
General
-
Target
925d3d3d542eac0af523434eb739f39e3fe37db39250853de6ee7132c42669d8
-
Size
44KB
-
MD5
e839dcf92bde79c7f1d3b98061377c1c
-
SHA1
5829a8ff8a98771ef537140056a22e898d11e364
-
SHA256
925d3d3d542eac0af523434eb739f39e3fe37db39250853de6ee7132c42669d8
-
SHA512
ab08f0113fc4ab2f4f3e9cdb59ef784fc96c53d5bdd0a531ba52299c09a7db0bf5dadfe067faaacab6ca7d247aa5b536dcabfa8163cdbaeba2242c12af705fbd
-
SSDEEP
768:QypKXbKK9pOhNrS7rSodkgfw28d9QnMtYb0ywTkdNRRGLan6H4AWeUa:b29LOfSHSofw2JM2bRR2an6YAWeUa
Malware Config
Signatures
Files
-
925d3d3d542eac0af523434eb739f39e3fe37db39250853de6ee7132c42669d8.exe windows x86
40c3aecfb90ccd84407c007f963cb2ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
wvnsprintfW
UrlIsNoHistoryA
PathCombineA
StrCSpnIW
SHRegGetBoolUSValueW
PathGetArgsA
StrStrIW
PathMakeSystemFolderA
SHQueryInfoKeyW
PathStripPathW
PathIsUNCW
SHRegCreateUSKeyW
SHEnumKeyExW
PathGetArgsW
SHRegEnumUSKeyA
PathCompactPathExW
StrChrNIW
PathStripToRootW
PathAppendA
StrToIntExA
ntdll
LdrSetDllManifestProber
NtAccessCheckByTypeResultList
RtlLargeIntegerToChar
RtlAreAllAccessesGranted
RtlLookupAtomInAtomTable
ZwCreateFile
RtlUpcaseUnicodeStringToOemString
strncat
RtlEnterCriticalSection
RtlSetSaclSecurityDescriptor
ZwAllocateVirtualMemory
__toascii
RtlIsGenericTableEmpty
ZwSetSystemEnvironmentValueEx
NlsAnsiCodePage
RtlMapGenericMask
ZwSetEventBoostPriority
NtImpersonateAnonymousToken
NtAccessCheckByTypeAndAuditAlarm
NtQueryAttributesFile
RtlCaptureContext
RtlCustomCPToUnicodeN
ZwLoadKey2
ZwOpenDirectoryObject
ZwGetDevicePowerState
RtlDosSearchPath_Ustr
ZwQueryTimerResolution
strrchr
ZwOpenSymbolicLinkObject
ZwResumeThread
rasman
RasRpcSetUserPreferences
RasDeviceConnect
RasRegisterRedialCallback
RasmanUninitialize
RasReferenceCustomCount
RasInitialize
RasRpcGetVersion
RasGetDialParams
RasRpcGetDevConfig
RasSetCachedCredentials
RasRpcUnloadDll
RasRpcDisconnectServer
RasSendCreds
RasEnumLanNets
RasFreeBuffer
RasRefConnection
RasPortBundle
RasGetTimeSinceLastActivity
RasRequestNotification
RasGetCustomScriptDll
RasInitializeNoWait
RasRpcConnect
RasPortOpen
RasGetHportFromConnection
RasRpcGetErrorString
RasGetDevConfig
RasEnableIpSec
duser
BuildDropTarget
SetActionTimeslice
DUserGetAlphaPRID
RegisterGadgetMessage
SetGadgetRect
DrawGadgetTree
GetGadgetCenterPoint
FindGadgetFromPoint
GetGadgetScale
GetMessageExA
GetStdColorBrushF
LookupGadgetTicket
GetActionTimeslice
DUserSendEvent
PeekMessageExW
EnumGadgets
DUserPostEvent
UtilBuildFont
FindGadgetMessages
UtilGetColor
InitGadgetComponent
GetMessageExW
msvcp60
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIG@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
?id@?$numpunct@D@std@@2V0locale@2@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??Pstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@II@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
_LNan
??0_Locinfo@std@@QAE@PBD@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
?do_widen@?$ctype@G@std@@MBEPBDPBD0PAG@Z
?find@?$char_traits@D@std@@SAPBDPBDIABD@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??Gstd@@YA?AV?$complex@O@0@ABOABV10@@Z
?_Getcat@?$codecvt@GDH@std@@SAIXZ
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??_F?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?_Infv@?$_Ctr@O@std@@SAOO@Z
?signaling_NaN@?$numeric_limits@O@std@@SAOXZ
??1overflow_error@std@@UAE@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z
?_Mode@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEHH@Z
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@JW4seekdir@ios_base@2@@Z
_Getcvt
atl
AtlModuleInit
AtlAxDialogBoxW
AtlUnmarshalPtr
AtlAxGetControl
AtlComPtrAssign
AtlAxCreateDialogA
AtlAxCreateControl
AtlAxCreateControlEx
AtlModuleTerm
AtlModuleUpdateRegistryFromResourceD
AtlModuleGetClassObject
AtlMarshalPtrInProc
AtlAxGetHost
AtlHiMetricToPixel
AtlIPersistPropertyBag_Save
AtlIPersistPropertyBag_Load
AtlAdvise
AtlIPersistStreamInit_Save
AtlModuleAddCreateWndData
AtlModuleRegisterTypeLib
AtlComQIPtrAssign
AtlModuleUnRegisterTypeLib
AtlModuleRegisterServer
AtlModuleUnregisterServer
AtlModuleAddTermFunc
DllUnregisterServer
kernel32
SetVDMCurrentDirectories
DosDateTimeToFileTime
LZOpenFileW
GetConsoleCharType
FreeEnvironmentStringsA
Thread32Next
VirtualAlloc
FindVolumeClose
FindActCtxSectionGuid
GetModuleHandleA
SearchPathW
DisableThreadLibraryCalls
DelayLoadFailureHook
SetConsoleFont
DeleteAtom
GetThreadPriority
FindVolumeMountPointClose
LocalUnlock
GetTapeStatus
SignalObjectAndWait
FindCloseChangeNotification
GetLongPathNameA
UTUnRegister
ConvertDefaultLocale
LoadResource
OpenSemaphoreA
LoadLibraryA
DosPathToSessionPathW
GetGeoInfoW
GetConsoleMode
GetConsoleAliasesW
Sections
.text Size: 1024B - Virtual size: 734B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ