Static task
static1
Behavioral task
behavioral1
Sample
7b122590b6d61f180b240711e50d671e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
7b122590b6d61f180b240711e50d671e.exe
Resource
win10v2004-en-20220113
General
-
Target
7b122590b6d61f180b240711e50d671e.exe
-
Size
328KB
-
MD5
7b122590b6d61f180b240711e50d671e
-
SHA1
a44b316893d548309d719321fb7e089d1cfc4a6c
-
SHA256
9c34bfd0aabc8008e61d53b3071cd89791170168dd11d8ac048738ac4019ed5f
-
SHA512
67db60a69b08165e96d1c67429804c880f5d173bd74fc17b16852a575c1856d9d241d002e29852ce35d6355a2933936a9b1f247e50b39c5e9af413d4131239c7
-
SSDEEP
6144:3lZ0Z4+4jCj1kDSmv4Z/GgMvfVTliqhdcaFvaSOO46y:VZaGsWemvIGgMXVRieBvC
Malware Config
Signatures
Files
-
7b122590b6d61f180b240711e50d671e.exe.exe windows x86
7435d26c0c13d1849943ee53652747f4
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapLock
CreateNamedPipeW
GetExitCodeProcess
DeactivateActCtx
GetVersionExW
GetConsoleCP
GetConsoleAliasesLengthA
GetDefaultCommConfigA
FindFirstFileExA
GetDriveTypeW
FreeEnvironmentStringsW
GetProcessPriorityBoost
SetVolumeMountPointA
SetCurrentDirectoryW
GetLongPathNameA
CopyFileW
TlsGetValue
LoadResource
SetComputerNameExW
SystemTimeToTzSpecificLocalTime
FindAtomA
ReleaseSemaphore
CallNamedPipeW
CreateMailslotW
BuildCommDCBAndTimeoutsA
VirtualProtect
LoadLibraryA
GlobalAlloc
TryEnterCriticalSection
GetCommandLineA
InterlockedDecrement
GetCalendarInfoA
DeleteFileA
CreateActCtxW
OutputDebugStringA
SetSystemTimeAdjustment
SetPriorityClass
WritePrivateProfileStringW
GetProcessHeaps
GlobalUnWire
GetProcessHeap
GetStartupInfoW
GetDiskFreeSpaceExW
GetCPInfoExW
GetWindowsDirectoryA
GetSystemWow64DirectoryW
GetLastError
GetProfileStringA
WriteProfileSectionA
GetProfileStringW
GetConsoleCursorInfo
SetLastError
DeleteVolumeMountPointW
DebugBreak
GetPrivateProfileSectionW
lstrcmpA
ReadFileScatter
SetConsoleMode
GetSystemWindowsDirectoryA
TerminateProcess
GlobalFindAtomW
FindCloseChangeNotification
SetTapeParameters
SetMailslotInfo
InterlockedExchange
DefineDosDeviceA
FindVolumeMountPointClose
EndUpdateResourceW
WriteConsoleA
GetSystemTimeAdjustment
GetPrivateProfileSectionA
WritePrivateProfileSectionA
GetPrivateProfileStructW
GetDriveTypeA
GetFileAttributesExA
FileTimeToLocalFileTime
MoveFileA
GetVolumePathNameW
HeapUnlock
lstrcmpW
SetDefaultCommConfigA
FindActCtxSectionGuid
SetThreadContext
MoveFileExW
GlobalUnlock
UnregisterWait
BuildCommDCBA
GlobalDeleteAtom
OpenEventW
TransmitCommChar
WaitNamedPipeA
GetPrivateProfileSectionNamesW
FindResourceExW
GetLocalTime
SetLocalTime
OpenSemaphoreA
GetProcAddress
SetFileShortNameW
lstrcpyW
VerLanguageNameW
GetThreadSelectorEntry
SetSystemTime
SetConsoleCP
GetConsoleAliasW
FlushConsoleInputBuffer
AllocConsole
GetAtomNameW
WriteConsoleInputA
TransactNamedPipe
GetCommState
LockFile
_lopen
GetConsoleAliasExesLengthA
GetWriteWatch
GetConsoleOutputCP
GetModuleHandleA
WriteConsoleOutputCharacterW
EnumDateFormatsW
HeapReAlloc
GetCommMask
SetFilePointer
FindClose
SetFileApisToANSI
CancelWaitableTimer
GetProcessHandleCount
GetCurrentProcessId
SetNamedPipeHandleState
GetCompressedFileSizeA
FindNextVolumeMountPointW
GetFullPathNameA
WriteProfileStringW
DeleteAtom
GlobalAddAtomA
AssignProcessToJobObject
QueryDosDeviceW
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
GetBinaryTypeA
CreateIoCompletionPort
InterlockedIncrement
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetStartupInfoA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
HeapValidate
IsBadReadPtr
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetStdHandle
WriteFile
WriteConsoleW
GetFileType
OutputDebugStringW
ExitProcess
LoadLibraryW
GetModuleFileNameA
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapSize
VirtualAlloc
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
FlushFileBuffers
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetStdHandle
CloseHandle
CreateFileA
user32
OemToCharW
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dujunak Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ