Static task
static1
Behavioral task
behavioral1
Sample
76b855f4822c0b26e098d7395723b31ad73c1606aebdb972380ef6c9f0bb4936.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
76b855f4822c0b26e098d7395723b31ad73c1606aebdb972380ef6c9f0bb4936.exe
Resource
win10v2004-20221111-en
General
-
Target
76b855f4822c0b26e098d7395723b31ad73c1606aebdb972380ef6c9f0bb4936
-
Size
1.5MB
-
MD5
e8ba501146d259b0c5c15e7a86dbabc7
-
SHA1
ad591c6f5412f29a790a56fc99e3559f6955a1c8
-
SHA256
76b855f4822c0b26e098d7395723b31ad73c1606aebdb972380ef6c9f0bb4936
-
SHA512
aa53f7aceaede5dc954b8fe242b81026508aa27609f09bab8b2099472c0e755de915a823a891547549d3f660e8fb089a60f07773859cf9483eab5c8d754d43e3
-
SSDEEP
24576:/t3Hk3JZ48P7BXR+Ak8hGLl+XT9aVRiSlMPVrpraW:V03JZmAkHAB+54bV
Malware Config
Signatures
Files
-
76b855f4822c0b26e098d7395723b31ad73c1606aebdb972380ef6c9f0bb4936.exe windows x86
f2b556df3a24387500ceb5819ce27c6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
LoadLibraryW
CompareStringW
GetSystemDirectoryA
Sleep
VirtualProtectEx
GetTimeFormatA
GetModuleFileNameA
GetFileTime
GetCurrentProcessId
GetLocalTime
CreateMutexA
OpenMutexA
DeleteFileA
FindFirstChangeNotificationA
ResetEvent
SetEnvironmentVariableA
HeapCreate
DeleteCriticalSection
GetEnvironmentVariableA
PeekNamedPipe
DuplicateHandle
HeapSize
GetCurrentThread
RtlUnwind
GetDateFormatA
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
GetTimeZoneInformation
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
user32
IntersectRect
GetKeyNameTextA
InflateRect
GetDoubleClickTime
EndDeferWindowPos
ExitWindowsEx
IsDlgButtonChecked
DrawIconEx
DrawEdge
comctl32
PropertySheetA
ImageList_SetOverlayImage
DestroyPropertySheetPage
CreateToolbarEx
ord6
ord17
ImageList_Destroy
comdlg32
GetSaveFileNameA
GetFileTitleA
FindTextA
GetOpenFileNameA
ole32
CoInitialize
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
ws2_32
socket
WSAStartup
getprotobynumber
getservbyname
WSACleanup
setsockopt
advapi32
GetTokenInformation
QueryServiceStatus
OpenThreadToken
OpenServiceA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
OpenProcessToken
StartServiceCtrlDispatcherA
InitializeSecurityDescriptor
RegEnumKeyA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetEntriesInAclA
SetSecurityDescriptorDacl
SetServiceStatus
CreateServiceA
OpenSCManagerA
LookupPrivilegeValueW
uxtheme
GetThemeFont
CloseThemeData
imm32
ImmGetCompositionStringA
ImmGetContext
ImmSetCompositionFontA
ImmNotifyIME
Sections
.text Size: 608KB - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 442KB - Virtual size: 442KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 420KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ