Static task
static1
Behavioral task
behavioral1
Sample
d8dedd3d52aedbd6c84b4bb58cf165b7cc80c514d745612131f455cbb4dd5676.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8dedd3d52aedbd6c84b4bb58cf165b7cc80c514d745612131f455cbb4dd5676.exe
Resource
win10v2004-20221111-en
General
-
Target
d8dedd3d52aedbd6c84b4bb58cf165b7cc80c514d745612131f455cbb4dd5676
-
Size
128KB
-
MD5
5f6e3b629172462ae0fbb331f9ab2904
-
SHA1
a3a6570fedace2500a71f32472113c9db7df277d
-
SHA256
d8dedd3d52aedbd6c84b4bb58cf165b7cc80c514d745612131f455cbb4dd5676
-
SHA512
69c58e2acf295bc04aca3064a8959bc7dd98b4e6c6ffc597fb16aff4755fbaa5de1318fe3dcf1cc65a8ef1b3581004e03fca678f9fef97a0a6d92d4b5899d481
-
SSDEEP
1536:Z5LdS5hcd5kKRFuRsAS/1JHXClOraqox39Cxkpo0hLVrfemcjL9ORLH65wGV06f:DLd2+d5kKRFM1g3XGIaRtlpPVCzr
Malware Config
Signatures
Files
-
d8dedd3d52aedbd6c84b4bb58cf165b7cc80c514d745612131f455cbb4dd5676.exe windows x86
74cfd24e5acab2345f1ef8a2f65b52cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
FlushInstructionCache
RaiseException
GetShortPathNameA
SetThreadLocale
FindFirstFileA
GetLastError
SetLastError
lstrcmpiA
GetProcAddress
EnterCriticalSection
GetTempFileNameA
FindClose
LoadLibraryA
LockResource
CreateEventW
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
LoadLibraryExA
VirtualProtect
OpenEventW
DeleteCriticalSection
GetCurrentThreadId
GetVersionExA
CloseHandle
GetTempPathA
GetSystemTime
DeleteFileA
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SizeofResource
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
GetStdHandle
Sleep
HeapCreate
IsDebuggerPresent
GetEnvironmentVariableA
GetSystemDirectoryA
ReadFile
IsDBCSLeadByte
GetExitCodeProcess
GetFileAttributesA
FlushFileBuffers
LeaveCriticalSection
ExitProcess
GetVolumeInformationA
WideCharToMultiByte
FindResourceExA
InitializeCriticalSection
WriteFile
GetWindowsDirectoryA
GetTickCount
SetEvent
WaitForSingleObject
GetUserDefaultLCID
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
LoadResource
FreeLibrary
lstrlenA
FreeResource
FindResourceA
GetFileSize
CreateFileA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LCMapStringW
LCMapStringA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetComputerNameA
GetConsoleMode
GetCPInfo
GetStartupInfoA
GetCommandLineA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
GetModuleHandleW
GetSystemInfo
VirtualQuery
user32
DialogBoxParamA
SetDlgItemTextA
EnableWindow
UpdateWindow
MapWindowPoints
LoadImageA
SetWindowTextA
GetWindow
CallWindowProcA
SendMessageA
ClientToScreen
SetCursor
GetMessageA
SetTimer
ScreenToClient
GetWindowRect
GetParent
CharNextA
GetClientRect
GetWindowTextLengthA
UnregisterClassA
GetWindowTextA
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
GetDlgItem
EndDialog
DefWindowProcA
RedrawWindow
GetSysColor
SetWindowPos
CheckDlgButton
IsDlgButtonChecked
GetActiveWindow
PostMessageA
SystemParametersInfoA
GetSystemMetrics
gdi32
CreateFontIndirectA
DeleteObject
GetObjectA
GetStockObject
CreateSolidBrush
SetTextColor
advapi32
OpenServiceA
OpenProcessToken
CreateWellKnownSid
RegCloseKey
GetUserNameA
OpenSCManagerA
RegDeleteValueA
LsaClose
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
ChangeServiceConfigA
RegEnumKeyExA
RegDeleteKeyA
LsaAddAccountRights
RegQueryValueExA
RegSetValueExA
GetTokenInformation
LsaOpenPolicy
CloseServiceHandle
shell32
ShellExecuteExA
ShellExecuteA
ole32
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoCreateInstance
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
wininet
InternetCanonicalizeUrlA
InternetCrackUrlA
Sections
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ