Static task
static1
Behavioral task
behavioral1
Sample
a1580ba70a95b1f326c3d3b23df6227e14aeb96178ab013a68b9c256ec68c416.exe
Resource
win10-en-20211208
General
-
Target
a1580ba70a95b1f326c3d3b23df6227e14aeb96178ab013a68b9c256ec68c416
-
Size
826KB
-
MD5
8c76817c2fe3ed4843cac361f6fd8d86
-
SHA1
f4124c09fa270df48e896072f53409fe59948291
-
SHA256
a1580ba70a95b1f326c3d3b23df6227e14aeb96178ab013a68b9c256ec68c416
-
SHA512
8d179df5feebe0d4cb2c971ff25dc7b9b4680cb79f48e7f19eb2df74889a807a0cd7ab40b1bddaac0fa7193d0656a3c48e78706fb62b33c27772c726d557d3ac
-
SSDEEP
24576:u9W23P0YmFCR/QQh6TIgDTpF/j+CuETV:unmFCR/5h69W+h
Malware Config
Signatures
Files
-
a1580ba70a95b1f326c3d3b23df6227e14aeb96178ab013a68b9c256ec68c416.exe windows x86
58ae3e2040078674fab6cce2e8f4e2cb
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ZombifyActCtx
GetConsoleAliasesLengthA
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
SetCommConfig
GetDriveTypeW
FreeEnvironmentStringsW
CreateTimerQueue
FindNextVolumeA
InitializeCriticalSectionAndSpinCount
ReadConsoleInputW
TlsSetValue
SetComputerNameExA
FindAtomW
BuildCommDCBAndTimeoutsA
VirtualProtect
GetModuleHandleA
LocalAlloc
InitializeCriticalSection
TlsGetValue
GetCommandLineW
InterlockedIncrement
GetCalendarInfoA
CopyFileA
OutputDebugStringW
SetSystemTimeAdjustment
GetPriorityClass
WritePrivateProfileStringW
ExitThread
GlobalWire
HeapCompact
GetStartupInfoA
CreatePipe
GetCPInfoExA
GetWindowsDirectoryW
GetSystemWow64DirectoryA
SetLastError
WriteProfileSectionW
GetCalendarInfoW
IsDebuggerPresent
SetConsoleCursorPosition
GetLastError
ContinueDebugEvent
WriteFile
GetNumberOfConsoleInputEvents
GetSystemWindowsDirectoryW
GlobalFindAtomA
FindNextChangeNotification
CreateActCtxA
GetMailslotInfo
GetPrivateProfileIntA
_lread
InterlockedDecrement
DefineDosDeviceA
SetVolumeMountPointA
EndUpdateResourceW
WriteConsoleA
InterlockedPushEntrySList
WritePrivateProfileSectionA
GetPrivateProfileStructA
DeleteCriticalSection
GetPrivateProfileSectionNamesW
GetFileAttributesExW
LocalFileTimeToFileTime
MoveFileW
TerminateProcess
HeapSetInformation
lstrcmpW
GetComputerNameW
FindActCtxSectionStringA
SetThreadContext
MoveFileExA
GetProcAddress
GlobalCompact
UnregisterWait
WriteConsoleInputA
FormatMessageA
FatalExit
SetCommTimeouts
WaitNamedPipeW
CreateIoCompletionPort
GetPrivateProfileSectionNamesA
FindResourceExA
GetSystemTimeAsFileTime
GetSystemInfo
EnumCalendarInfoExW
FreeEnvironmentStringsA
OpenSemaphoreA
SetMailslotInfo
lstrcpyW
VerLanguageNameW
GetThreadSelectorEntry
GetSystemTime
UnlockFile
GetConsoleCP
GetConsoleAliasA
SetConsoleScreenBufferSize
GetAtomNameW
WriteConsoleInputW
CreateMailslotA
GetCommState
SetHandleCount
_lopen
GetConsoleAliasExesLengthW
ResetWriteWatch
ClearCommBreak
ChangeTimerQueueTimer
GetOverlappedResult
EnumDateFormatsA
GlobalDeleteAtom
HeapFree
GetConsoleWindow
GetStringTypeA
SetFilePointer
PostQueuedCompletionStatus
SetFileApisToANSI
OpenWaitableTimerW
GetCurrentProcessId
PeekNamedPipe
FillConsoleOutputCharacterW
FindNextVolumeMountPointA
WriteProfileStringW
InitAtomTable
GlobalAddAtomA
WriteConsoleOutputCharacterA
TerminateJobObject
VirtualAlloc
GetBinaryTypeW
QueryDosDeviceW
LeaveCriticalSection
GetVolumePathNameA
FileTimeToDosDateTime
Sleep
EnterCriticalSection
RaiseException
RtlUnwind
MoveFileA
GetCommandLineA
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
GetCurrentProcess
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
CloseHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
ExitProcess
GetStdHandle
GetFileType
QueryPerformanceCounter
GetTickCount
GetModuleFileNameA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
LoadLibraryW
SetStdHandle
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoA
LoadLibraryA
CreateFileA
user32
OemToCharA
advapi32
GetFileSecurityW
msimg32
AlphaBlend
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 585KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kipulu Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ