Static task
static1
Behavioral task
behavioral1
Sample
12a4172a264558e81727a90091ad29f56c65140941efc7b885f5c504d4027baa.exe
Resource
win10-en-20211208
General
-
Target
12a4172a264558e81727a90091ad29f56c65140941efc7b885f5c504d4027baa
-
Size
333KB
-
MD5
8d10f17b2bcefbb4a5900fe598e7a47e
-
SHA1
a24567aeb3b6da6acf5d22e106cbab723b26b5f3
-
SHA256
12a4172a264558e81727a90091ad29f56c65140941efc7b885f5c504d4027baa
-
SHA512
c84745e8bf26e6c80f10fefe77f0db718a6ed58d1dde6907acf78ad6f5c1af0baa50a39f64b586f7435a9f318f2c81e33d1e57555ac0398a0067b8c45fdec9c2
-
SSDEEP
6144:N59narVNecfjEk7PkB8pznxcw5AtlgEbpB2BKRc/F6cDsTCXFIHWNSpqBS:N5FQbxgS9xcwetGEv2BKRc9sTCOHWQ
Malware Config
Signatures
Files
-
12a4172a264558e81727a90091ad29f56c65140941efc7b885f5c504d4027baa.exe windows x86
04a163d3ee35887696fe3625c3dbe935
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapLock
CreateNamedPipeW
TerminateThread
DeactivateActCtx
GetConsoleAliasesLengthA
GetVersionExW
GetConsoleCP
GetDefaultCommConfigA
FindFirstFileExW
GetDriveTypeW
FreeEnvironmentStringsW
GetProcessPriorityBoost
SetVolumeMountPointA
SetCurrentDirectoryW
GetLongPathNameA
TlsGetValue
SetComputerNameExA
FindAtomA
BuildCommDCBAndTimeoutsW
VirtualProtect
LoadLibraryA
GlobalAlloc
TryEnterCriticalSection
TlsSetValue
GetCommandLineA
InterlockedDecrement
GetCalendarInfoA
DeleteFileA
ZombifyActCtx
OutputDebugStringA
GetSystemTimeAdjustment
GetPriorityClass
WritePrivateProfileStringW
GetProcessHeaps
GlobalUnWire
GetProcessHeap
GetStartupInfoA
GetDiskFreeSpaceExW
GetCPInfoExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetLastError
GetProfileStringA
WriteProfileSectionA
GetProfileStringW
GetConsoleCursorInfo
SetLastError
DeleteVolumeMountPointA
DebugBreak
GetPrivateProfileSectionW
ReadFileScatter
GetNumberOfConsoleInputEvents
GetSystemWindowsDirectoryA
TerminateProcess
GlobalFindAtomA
FindCloseChangeNotification
CreateActCtxW
SetMailslotInfo
InterlockedExchange
DefineDosDeviceA
FindVolumeMountPointClose
EndUpdateResourceA
WriteConsoleA
GetPrivateProfileSectionA
WritePrivateProfileSectionW
GetPrivateProfileStructA
GetPrivateProfileSectionNamesA
GetFileAttributesExA
FileTimeToLocalFileTime
MoveFileA
GetVolumePathNameW
HeapUnlock
SetDefaultCommConfigA
FindActCtxSectionStringA
SetThreadContext
MoveFileExA
GlobalUnlock
UnregisterWait
BuildCommDCBA
GlobalDeleteAtom
GetBinaryTypeA
OpenEventW
SetCommTimeouts
WaitNamedPipeA
GetPrivateProfileSectionNamesW
FindResourceExW
GetSystemTimeAsFileTime
GetSystemInfo
SetLocalTime
OpenSemaphoreA
lstrcmpW
GetProcAddress
CreateIoCompletionPort
SetFileShortNameW
lstrcpyW
VerLanguageNameW
GetThreadSelectorEntry
SetSystemTime
GetConsoleAliasW
SetConsoleScreenBufferSize
AllocConsole
GetAtomNameA
WriteConsoleInputA
TransactNamedPipe
GetCommState
_lopen
ResetWriteWatch
GetConsoleOutputCP
GetModuleHandleA
EnumDateFormatsW
LockFile
GetConsoleAliasExesLengthA
WriteConsoleOutputCharacterW
HeapReAlloc
SetFilePointer
PostQueuedCompletionStatus
SetFileApisToANSI
CancelWaitableTimer
GetCurrentProcess
SetNamedPipeHandleState
GetCompressedFileSizeA
FindNextVolumeMountPointW
GetFullPathNameW
WriteProfileStringW
DeleteAtom
GlobalAddAtomA
TerminateJobObject
QueryDosDeviceW
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
GetBinaryTypeW
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
InterlockedCompareExchange
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
LCMapStringA
LCMapStringW
GetCPInfo
HeapValidate
IsBadReadPtr
GetStringTypeW
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
GetStdHandle
WriteFile
WriteConsoleW
GetFileType
OutputDebugStringW
ExitProcess
LoadLibraryW
GetModuleFileNameA
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
HeapAlloc
HeapSize
VirtualAlloc
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
FlushFileBuffers
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetStdHandle
CloseHandle
CreateFileA
user32
OemToCharA
Sections
.text Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fuvey Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ