Static task
static1
Behavioral task
behavioral1
Sample
05f5471a83158d0cf980eaf3fca5cb3050c45ac6673b9086ac7774610ab65d8d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
05f5471a83158d0cf980eaf3fca5cb3050c45ac6673b9086ac7774610ab65d8d.exe
Resource
win10v2004-20230221-en
General
-
Target
05f5471a83158d0cf980eaf3fca5cb3050c45ac6673b9086ac7774610ab65d8d
-
Size
442KB
-
MD5
dbf601924d869c9f538b1751baecf32e
-
SHA1
5846aa7b1e95c4ce789424b191bfa2b347d8cb59
-
SHA256
05f5471a83158d0cf980eaf3fca5cb3050c45ac6673b9086ac7774610ab65d8d
-
SHA512
833e881b63be236df8de6f97cfaa27f8ed2942243b6fff501764c5fbe08298ecc232252a36ab66a014f319c5769a92db1890c9e36432f283f7e1bccaf638b9e4
-
SSDEEP
6144:PLYBkFoRJPftKofSUj1hvrrViKxzWMB5K4AST5hRXQEJKL8yKPs5GqGbJp3BK0:PLYBkdoRHsKxhkLSbRAEkL8rSGquK
Malware Config
Signatures
Files
-
05f5471a83158d0cf980eaf3fca5cb3050c45ac6673b9086ac7774610ab65d8d.exe windows x86
c1ee85a755f580c0f808e691476eb640
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wlanapi
WlanConnect
WlanSetProfile
WlanOpenHandle
WlanCloseHandle
WlanFreeMemory
WlanEnumInterfaces
rpcrt4
UuidFromStringW
UuidToStringW
RpcStringFreeW
kernel32
FindFirstFileW
MoveFileW
CopyFileW
FindNextFileW
FindClose
RemoveDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
DeleteFileW
GetTempPathW
GetLastError
ExpandEnvironmentStringsW
GetCurrentProcess
OutputDebugStringW
GetShortPathNameW
GetEnvironmentVariableW
lstrcpyW
lstrcatW
SetPriorityClass
SetThreadPriority
GetCurrentThread
CreateProcessW
ResumeThread
GetPrivateProfileStringW
GetSystemPowerStatus
CreatePipe
GetStartupInfoW
CloseHandle
WaitForSingleObject
ReadFile
Sleep
LoadLibraryW
GetProcAddress
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
GetLogicalDriveStringsW
MultiByteToWideChar
GetModuleHandleW
OutputDebugStringA
GetVersion
GetVersionExW
CreateDirectoryW
SetUnhandledExceptionFilter
CreateFileW
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
GetTickCount
GetWindowsDirectoryW
GetDiskFreeSpaceExW
GetDriveTypeW
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
FlushFileBuffers
SetFilePointer
WideCharToMultiByte
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
GetACP
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetStdHandle
CreateFileA
SetEndOfFile
GetProcessHeap
UnhandledExceptionFilter
TerminateProcess
CompareStringW
LCMapStringW
GetCPInfo
GetConsoleMode
GetConsoleCP
GetFileType
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
HeapSetInformation
GetCommandLineW
SetHandleCount
HeapCreate
GetStdHandle
WriteFile
FreeLibrary
SetEnvironmentVariableA
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetSystemTimeAsFileTime
HeapReAlloc
GetDateFormatA
TlsAlloc
IsValidCodePage
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetStringTypeW
GetLocaleInfoW
HeapFree
HeapAlloc
ExitThread
CreateThread
ExitProcess
GetTimeFormatA
GetOEMCP
user32
GetWindowThreadProcessId
wsprintfW
MessageBoxW
SendMessageW
GetForegroundWindow
ShowWindow
ExitWindowsEx
advapi32
RegOpenKeyExW
DuplicateTokenEx
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegQueryValueExW
shell32
ShellExecuteExW
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoInitialize
CoInitializeEx
CoCreateInstance
oleaut32
SysAllocString
VariantClear
SysFreeString
shlwapi
PathFileExistsW
PathCombineW
PathRemoveFileSpecW
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ