Static task
static1
Behavioral task
behavioral1
Sample
a78a6a2d04f9a1c53306d07d1126fe97a3438bfbab583205d68f4af6bfdb6b66.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a78a6a2d04f9a1c53306d07d1126fe97a3438bfbab583205d68f4af6bfdb6b66.exe
Resource
win10v2004-20220901-en
General
-
Target
a78a6a2d04f9a1c53306d07d1126fe97a3438bfbab583205d68f4af6bfdb6b66
-
Size
5.2MB
-
MD5
6f87dca635772b1ec99b97872019d790
-
SHA1
d2c6271ad772d95daa96443ec0f451ff99139940
-
SHA256
a78a6a2d04f9a1c53306d07d1126fe97a3438bfbab583205d68f4af6bfdb6b66
-
SHA512
f7b7ab6e320a217c1aa24c02955544fec115588bfdb418d89e3dd95af98f6b20ead0947e52c216f9179e2db71904fab8288117a98ec130867db30bc7b013a04e
-
SSDEEP
98304:/yHQVqaH962tr+G11XquVUVT2AtqEmWvXKuvO2cUCzLjpdq421MrDRkWU:LVqajrL7VUVT16qauvOE8FLaMNU
Malware Config
Signatures
Files
-
a78a6a2d04f9a1c53306d07d1126fe97a3438bfbab583205d68f4af6bfdb6b66.exe windows x86
35fd7a8b7844c566491e02551fbb2a86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord92
ord16
ord113
ord141
ord159
ord32
ord70
ord88
ord169
ord8
ord118
ord160
comctl32
InitCommonControlsEx
ImageList_Create
ImageList_Add
ord17
wtsapi32
WTSQuerySessionInformationW
WTSFreeMemory
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
GetModuleHandleW
GetLocaleInfoW
GetNativeSystemInfo
GetSystemDefaultLCID
GetUserDefaultLCID
GetPrivateProfileStringW
LoadResource
SizeofResource
LockResource
WriteFile
GetCurrentProcess
CreateDirectoryW
LocalFree
GetTickCount
Sleep
GetExitCodeProcess
SetFileAttributesW
lstrlenW
lstrcpyW
lstrcatW
SystemTimeToFileTime
OpenProcess
lstrcmpiW
ExpandEnvironmentStringsW
GetVersion
GetWindowsDirectoryW
SetCurrentDirectoryW
GetCommandLineW
CreateMutexW
MultiByteToWideChar
FormatMessageW
AttachConsole
FreeConsole
GetUserDefaultUILanguage
EnumResourceNamesW
GetDiskFreeSpaceExW
SetHandleCount
GetProcAddress
VirtualFree
WideCharToMultiByte
HeapCreate
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLastError
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
CompareStringW
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapReAlloc
GetFileType
HeapFree
ExitProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsA
UnmapViewOfFile
CloseHandle
VirtualQuery
MapViewOfFile
CreateFileMappingW
CreateFileW
GetSystemTime
FileTimeToSystemTime
GetFileAttributesExW
LoadLibraryW
FreeLibrary
DeleteFileW
GetModuleFileNameW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
SetFilePointer
GetConsoleCP
GetVersionExW
FindResourceExW
GetTempFileNameW
GetModuleFileNameA
GetTempPathW
GetConsoleMode
CreateFileA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
ReadFile
GetModuleHandleA
VirtualAlloc
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
user32
SetWindowPos
ReleaseDC
GetWindowTextLengthW
GetWindowDC
LoadBitmapW
PostMessageW
KillTimer
SetTimer
EnableMenuItem
GetSystemMenu
LoadImageW
SetWindowLongW
SetCursor
GetDlgCtrlID
IsDlgButtonChecked
UpdateWindow
InvalidateRect
SendMessageW
GetDC
SetParent
ShowWindow
AttachThreadInput
BringWindowToTop
SetForegroundWindow
GetForegroundWindow
DrawTextW
GetWindowTextW
ScreenToClient
GetWindowRect
GetClientRect
EndDialog
GetDlgItem
SetWindowTextW
DialogBoxParamW
SendInput
ExitWindowsEx
GetWindowThreadProcessId
IsWindow
FindWindowW
wsprintfW
DestroyWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
MessageBoxW
LoadStringW
GetSystemMetrics
SetFocus
gdi32
GetDeviceCaps
SetBkMode
Rectangle
SelectObject
CreatePen
CreateSolidBrush
GetStockObject
SetTextColor
CreateFontW
advapi32
LookupPrivilegeValueW
QueryServiceStatusEx
ControlService
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
EqualSid
OpenProcessToken
DuplicateTokenEx
IsValidSid
GetTokenInformation
FreeSid
AllocateAndInitializeSid
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
AdjustTokenPrivileges
shell32
ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW
ole32
CoCreateInstance
CoInitialize
CoUninitialize
CoCreateGuid
StringFromGUID2
IIDFromString
oleaut32
VariantInit
SysAllocString
SysFreeString
Sections
.text Size: 327KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25.9MB - Virtual size: 25.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ