Static task
static1
Behavioral task
behavioral1
Sample
c0ac9a557eda535bd9e4de6fd2b7baa06dd6a5307d319cf28bdfe36c7ca976b2.exe
Resource
win10-en-20211208
General
-
Target
c0ac9a557eda535bd9e4de6fd2b7baa06dd6a5307d319cf28bdfe36c7ca976b2
-
Size
301KB
-
MD5
16e7434e47fa2f9a93ff6abbf98fbaf2
-
SHA1
8a45a43a9a9ef59c1e085dc7467a406403c0c3af
-
SHA256
c0ac9a557eda535bd9e4de6fd2b7baa06dd6a5307d319cf28bdfe36c7ca976b2
-
SHA512
689a15ae648e8703bd93470376c2485aa3ea1f64082955c665cef36c4e95f486f1c72625aad73cfd1d59eaa903cea086b7eaa4c9d482fd5ce52febdfdd6fe29a
-
SSDEEP
3072:gk7gMVwYeKDbqX9t3S9SOVhIThUeuU6TAQi/VnRiu0CkM/h3:g4VwgDW9Q5ETCe8TAVhECk
Malware Config
Signatures
Files
-
c0ac9a557eda535bd9e4de6fd2b7baa06dd6a5307d319cf28bdfe36c7ca976b2.exe windows x86
311ea42554ae3ae0114019c7e3754cbb
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
SetComputerNameExA
VirtualQuery
GetDefaultCommConfigW
FindResourceExW
InterlockedIncrement
ReadConsoleA
GetConsoleAliasA
SetMailslotInfo
SleepEx
GetConsoleAliasesA
GetConsoleAliasesLengthA
GlobalAlloc
GetFileAttributesA
DnsHostnameToComputerNameW
GetTimeFormatW
GetOverlappedResult
SetConsoleTitleA
EnumSystemLocalesA
GetStdHandle
GetProcAddress
GetLongPathNameA
VirtualAlloc
GetAtomNameA
UnhandledExceptionFilter
GetModuleFileNameA
GetModuleHandleA
SetLocaleInfoW
GetStringTypeW
GetConsoleTitleW
WriteProfileStringW
GetFileTime
GetVersionExA
ReadConsoleInputW
CreateThread
GetComputerNameA
HeapAlloc
MultiByteToWideChar
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
WriteFile
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetFileType
CloseHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetLocaleInfoA
CreateFileA
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
advapi32
ReportEventA
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ