Static task
static1
Behavioral task
behavioral1
Sample
53564c932bf33eb557aec51cd079702fbfb16306b8f9a002c285438cd6073465.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
53564c932bf33eb557aec51cd079702fbfb16306b8f9a002c285438cd6073465.exe
Resource
win10v2004-20220812-en
General
-
Target
53564c932bf33eb557aec51cd079702fbfb16306b8f9a002c285438cd6073465
-
Size
273KB
-
MD5
8e63734faa040f14e6a6b5d10d98296f
-
SHA1
6dfdd8d5d5950ee73b9b6372a56b9d8c9d88fa34
-
SHA256
53564c932bf33eb557aec51cd079702fbfb16306b8f9a002c285438cd6073465
-
SHA512
c67d955b638fa1a6ed15bf71f87c1ebb01e86466efb8539ea71e96f06b9540ee53eea32ddfd12e171034512eda951db043892a31fa01afa57e9bf80d68c69589
-
SSDEEP
3072:zep0USfkLgY0KZqQhCgLd4K8SVWL8AaxHyZ1xk+D8som06kV8dbkNQ918EsB:yWUQ2Fn8h4A3xk6cHAbkSZs
Malware Config
Signatures
Files
-
53564c932bf33eb557aec51cd079702fbfb16306b8f9a002c285438cd6073465.exe windows x86
5e8ecc072c20898cc2ff975240c09970
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetFilePointer
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
DecodePointer
GlobalFree
RaiseException
InitializeCriticalSectionAndSpinCount
lstrlenW
FindClose
lstrcpyA
FindFirstFileW
InterlockedExchange
GetProcAddress
CreateThread
SetEvent
WaitForSingleObject
Sleep
CreateEventW
LoadLibraryW
QueueUserWorkItem
GetVersion
OpenProcess
GetCurrentProcess
GetSystemInfo
GetModuleHandleW
ExpandEnvironmentStringsW
GetVersionExW
TerminateProcess
GetExitCodeProcess
TerminateThread
WaitForMultipleObjects
DuplicateHandle
CreatePipe
CreateProcessW
HeapAlloc
HeapFree
GetProcessHeap
SetLastError
lstrcpyW
lstrcatW
CreateMutexA
GlobalMemoryStatusEx
GetCurrentProcessId
GetLogicalDrives
WinExec
GetPrivateProfileStringW
WritePrivateProfileStringW
WriteFile
GetDiskFreeSpaceExW
FindNextFileW
GetComputerNameW
GetSystemDefaultLCID
GetTickCount
ReadConsoleW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetFileType
LoadLibraryExW
ReadFile
DeleteFileW
CreateFileW
GetModuleFileNameW
CloseHandle
GetFileSize
GetLastError
ExitProcess
GetOEMCP
GetACP
IsValidCodePage
GetStdHandle
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetCommandLineW
GetSystemTimeAsFileTime
GetModuleHandleExW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
EncodePointer
GetStringTypeW
GetDriveTypeW
FreeLibrary
user32
GetSystemMetrics
wsprintfW
advapi32
CryptAcquireContextW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
RegCloseKey
RegSetValueExW
LookupAccountSidW
GetTokenInformation
OpenProcessToken
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ole32
CoInitialize
CoCreateGuid
CoUninitialize
CoCreateInstance
ws2_32
recv
inet_addr
htons
getsockopt
ioctlsocket
connect
closesocket
select
send
setsockopt
shutdown
socket
gethostbyname
WSAGetLastError
inet_ntoa
WSAStartup
winhttp
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpWriteData
wtsapi32
WTSEnumerateSessionsW
WTSQuerySessionInformationW
WTSFreeMemory
iphlpapi
GetIpAddrTable
rpcrt4
RpcStringFreeA
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcBindingFromStringBindingA
RpcBindingFree
RpcStringBindingComposeA
RpcStringFreeW
powrprof
CallNtPowerInformation
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ