Static task
static1
Behavioral task
behavioral1
Sample
90e54b99234614e4d8d720c5140c0ff94938c085c2adacf8440e83e18c405e99.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
90e54b99234614e4d8d720c5140c0ff94938c085c2adacf8440e83e18c405e99.exe
Resource
win10v2004-20221111-en
General
-
Target
90e54b99234614e4d8d720c5140c0ff94938c085c2adacf8440e83e18c405e99
-
Size
1.3MB
-
MD5
7f7e32ad84983532e9fa0d6e2800392e
-
SHA1
8da6fd046193431c5d5a747e90a32c4f39274c6f
-
SHA256
90e54b99234614e4d8d720c5140c0ff94938c085c2adacf8440e83e18c405e99
-
SHA512
b9a338b9d0a4c7b13ec662510b79d73b2c0bc8f4a0ab60fcb3323a62d4602ede5d69fe2aeee64f5f5246a1004cbe2846278dd7fc897af51d18778e9a58b0c0f2
-
SSDEEP
24576:w+vu/jwbnhQGsHsTgPo5W/PLNhHKR6u7j1BwsHUkkWhBIpwd6piTPaLKmgIFZirm:/uehQGsHsTgPo5W/PBhHtuV0MzFPa+wb
Malware Config
Signatures
Files
-
90e54b99234614e4d8d720c5140c0ff94938c085c2adacf8440e83e18c405e99.exe windows x86
9d9629ca2110ed98a010179197e9c98d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
LocalFree
GetComputerNameW
CreateProcessW
GetCurrentProcess
GetModuleFileNameW
CreateMutexW
GetFileAttributesW
ReleaseMutex
Sleep
GetLocalTime
GetWindowsDirectoryW
GetProcAddress
ExitProcess
GetModuleHandleW
InterlockedDecrement
MulDiv
CreateDirectoryW
ReadFile
SetFileTime
SetFilePointer
LocalFileTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
SetEndOfFile
HeapSize
ReadConsoleW
WriteConsoleW
GetTimeZoneInformation
GetProcessHeap
GetSystemDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetVersionExW
CreateFileW
WaitForSingleObject
WriteFile
GetVolumeInformationW
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetFullPathNameW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapFree
HeapReAlloc
HeapAlloc
GetACP
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
FileTimeToSystemTime
GetTempPathW
SetEnvironmentVariableA
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
FreeLibrary
LoadLibraryExW
RaiseException
user32
ShowWindow
RegisterClassW
DispatchMessageW
CreateWindowExW
MessageBoxW
GetClientRect
wsprintfW
LoadCursorW
PostMessageW
DefWindowProcW
GetMessageW
ReleaseDC
SetRect
GetDC
TranslateMessage
gdi32
GetDeviceCaps
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
ConvertSidToStringSidW
LookupAccountNameW
shell32
SHCreateDirectoryExW
SHGetFolderPathW
ole32
CoInitializeEx
OleInitialize
OleSetContainedObject
OleCreate
OleLockRunning
CoUninitialize
CoCreateInstance
oleaut32
SysFreeString
VariantClear
SysAllocString
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
iphlpapi
GetAdaptersInfo
shlwapi
PathRemoveExtensionW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
Sections
.text Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 758KB - Virtual size: 758KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ