Static task
static1
Behavioral task
behavioral1
Sample
b615742bd7515ac7a92da6decc63c64bd2463432035be189e9d83511b0115e0c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b615742bd7515ac7a92da6decc63c64bd2463432035be189e9d83511b0115e0c.exe
Resource
win10v2004-20220901-en
General
-
Target
b615742bd7515ac7a92da6decc63c64bd2463432035be189e9d83511b0115e0c
-
Size
1.5MB
-
MD5
84b8a36da17d54f6eea764ab6d45d875
-
SHA1
15a9a968908cde563bf3e773566352b87ecf2bc8
-
SHA256
b615742bd7515ac7a92da6decc63c64bd2463432035be189e9d83511b0115e0c
-
SHA512
3900e783f1e24584b0d826ec20a2ab3fe7ee4e0218921031ab4dc701983a4481e24524dff1774c1fedc72140c3925cb7b49d0382ef039a165e683efaaded6309
-
SSDEEP
24576:fmk6FMrDpPwLra1hbrR/0J0zuaY9wB6WW9iI9c58i1A2fYT0CK0RohkZ3xGoA7Nt:MDqbXR/VGAI9c+iqIDCb7Gop5Bo
Malware Config
Signatures
Files
-
b615742bd7515ac7a92da6decc63c64bd2463432035be189e9d83511b0115e0c.exe windows x86
bc28f5e712a966e80c528e39f5468be4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetClassDevsExW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
crypt32
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertFreeCertificateContext
CertOpenSystemStoreW
CertEnumCertificatesInStore
CertCloseStore
comctl32
ord17
kernel32
GetCommandLineA
GetOEMCP
CreateEventW
ResumeThread
SuspendThread
SetEvent
WaitForSingleObject
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ResetEvent
CreateFileW
SetCommMask
SetupComm
GetCommState
SetCommState
ClearCommError
ReadFile
GetOverlappedResult
WriteFile
GetLastError
FlushFileBuffers
PurgeComm
GetModuleFileNameW
MultiByteToWideChar
DeleteFileW
WideCharToMultiByte
DeviceIoControl
LocalAlloc
SetLastError
LocalFree
CancelIo
CreateThread
CreateMutexW
ReleaseMutex
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
GetSystemInfo
GetCurrentProcess
GetSystemTimeAsFileTime
GetModuleHandleW
GetCommandLineW
GetCurrentThreadId
GetLocalTime
QueryPerformanceFrequency
QueryPerformanceCounter
ExitProcess
InterlockedExchange
InterlockedCompareExchange
SwitchToThread
FormatMessageA
TlsAlloc
TlsGetValue
TlsSetValue
CompareFileTime
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
MoveFileExW
VerSetConditionMask
FreeLibrary
SleepEx
VerifyVersionInfoW
GetTickCount
CreateFileA
CreateEventA
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
GetFullPathNameW
GetCurrentDirectoryW
WriteConsoleW
SetStdHandle
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileAttributesExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetEnvironmentStringsW
SetEndOfFile
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
HeapSize
FormatMessageW
PeekNamedPipe
GetFileType
GetDriveTypeW
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
RtlUnwind
RaiseException
TerminateProcess
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
WaitForSingleObjectEx
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
DecodePointer
EncodePointer
user32
PostMessageW
SendMessageW
DestroyWindow
IsWindow
wsprintfW
DialogBoxParamW
EndDialog
GetDlgItem
EnableWindow
GetWindowTextLengthW
SetWindowTextW
MessageBoxW
SetWindowLongW
GetWindowLongW
SetTimer
KillTimer
LoadIconW
ShowWindow
GetWindowTextA
SetWindowTextA
SetFocus
advapi32
SystemFunction036
ole32
CoGetMalloc
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
ws2_32
accept
__WSAFDIsSet
WSAIoctl
WSACleanup
select
listen
WSASetLastError
WSAStartup
getpeername
getsockname
closesocket
connect
ioctlsocket
getsockopt
recv
send
setsockopt
shutdown
socket
getaddrinfo
freeaddrinfo
WSAGetLastError
htons
htonl
bind
ntohs
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cxqyuuu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE