Static task
static1
Behavioral task
behavioral1
Sample
418a45b6d7b2b1c9615bcc5023765b25621429bc1c45702d6f43695e101da579.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
418a45b6d7b2b1c9615bcc5023765b25621429bc1c45702d6f43695e101da579.exe
Resource
win10v2004-20220812-en
General
-
Target
418a45b6d7b2b1c9615bcc5023765b25621429bc1c45702d6f43695e101da579
-
Size
366KB
-
MD5
dd065e54805dfc8c1640065803a3fa23
-
SHA1
e0e3646919b6fdb37fd9d9d70d3c0ef23d46dc1a
-
SHA256
418a45b6d7b2b1c9615bcc5023765b25621429bc1c45702d6f43695e101da579
-
SHA512
5f7885acfa03411e743579b537257b68aec67e08babcf035689338663f27be082307e65adced4a7f94a413f44a141b5670872d1791b728d4ef6fb592a2b958b0
-
SSDEEP
6144:W8afWfuCiCEfwdciYYx8+W5p56UKV4UszE7hvriQi:W6ueEMPvW8UhUszE7hvDi
Malware Config
Signatures
Files
-
418a45b6d7b2b1c9615bcc5023765b25621429bc1c45702d6f43695e101da579.exe windows x86
f9828a7115467336fc1f5ae8124ddad0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
GetConsoleCP
FindNextFileA
FindFirstFileExA
DecodePointer
GetFileAttributesA
WriteConsoleW
HeapSize
HeapReAlloc
FlushFileBuffers
SetEndOfFile
ReadFile
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetPrivateProfileStructA
GetEnvironmentVariableW
FindClose
GetConsoleAliasExesLengthW
SetComputerNameA
_hread
CopyFileExW
TlsFree
UnregisterWait
FillConsoleOutputCharacterW
SetConsoleTitleW
Process32First
RequestWakeupLatency
FindNextChangeNotification
SetLocaleInfoA
DisableThreadLibraryCalls
LCMapStringW
CompareStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
VirtualQuery
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
FreeLibrary
GetProcAddress
LoadLibraryExW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
SetFilePointerEx
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
CloseHandle
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
GetLocalTime
SetStdHandle
GetFileType
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
GetStringTypeW
RaiseException
CreateFileW
GetFileAttributesExW
ReadConsoleW
user32
GetUpdateRect
GetSystemMenu
SetMenuItemBitmaps
MoveWindow
CallNextHookEx
SetProcessWindowStation
PostThreadMessageW
GetTabbedTextExtentW
DeleteMenu
RealGetWindowClass
BroadcastSystemMessageW
GetClassInfoExW
WINNLSEnableIME
SetWindowsHookA
WaitForInputIdle
DdeDisconnect
FlashWindowEx
InSendMessage
GetNextDlgTabItem
gdi32
CreateFontIndirectExA
GetColorSpace
UpdateColors
CreatePalette
EqualRgn
GetRgnBox
SetPixel
RemoveFontResourceExW
GetTextFaceW
GetGraphicsMode
SelectObject
GetGlyphOutlineA
SetWindowExtEx
GdiGetPageHandle
GetFontLanguageInfo
winspool.drv
SetPrinterW
GetPrinterDataExW
EnumPortsW
comdlg32
GetOpenFileNameA
advapi32
LsaOpenTrustedDomain
AreAnyAccessesGranted
LsaLookupPrivilegeName
QueryServiceConfigA
LookupAccountNameW
SystemFunction031
AllocateAndInitializeSid
RegSaveKeyA
BuildExplicitAccessWithNameW
CryptEnumProvidersA
AddUsersToEncryptedFile
ole32
CLSIDFromString
HWND_UserUnmarshal
OleCreateFromData
CoAddRefServerProcess
ReadClassStg
WriteClassStg
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ