Static task
static1
Behavioral task
behavioral1
Sample
007ae7550fcc0e7368a9ebd1dcc6066145f256af24847075cde83233ced10d00.exe
Resource
win10-en-20211208
General
-
Target
007ae7550fcc0e7368a9ebd1dcc6066145f256af24847075cde83233ced10d00
-
Size
828KB
-
MD5
9501470fe5ea3232193373b54c6d8987
-
SHA1
f5eaf1fc0691910e9b35d080219f226e8935eb72
-
SHA256
007ae7550fcc0e7368a9ebd1dcc6066145f256af24847075cde83233ced10d00
-
SHA512
869946fa03e34de6a51239dd10d8bef9a24adce20807918fb71fdf676cd0dd4dab6fb710c02f20cebdac4e9d2008b53608fbc9379b02b1f62cf0e269782d4e88
-
SSDEEP
24576:0dZ+dieCVku/hNTyd7cFaFzxspuFhXAHroP8lFI:mFVDNTyd7cFaFz3PdP8g
Malware Config
Signatures
Files
-
007ae7550fcc0e7368a9ebd1dcc6066145f256af24847075cde83233ced10d00.exe windows x86
3f0af22a03ecdedbd2c62f1da70f1873
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ZombifyActCtx
GetConsoleAliasesLengthW
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
SetCommConfig
GetDriveTypeW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeA
InitializeCriticalSectionAndSpinCount
ReadConsoleInputW
TlsSetValue
SetComputerNameExW
FindAtomW
BuildCommDCBAndTimeoutsW
VirtualProtect
LoadLibraryA
LocalAlloc
InitializeCriticalSection
TlsGetValue
GetCommandLineA
InterlockedIncrement
GetCalendarInfoA
CopyFileA
OutputDebugStringA
GetSystemTimeAdjustment
GetPriorityClass
WritePrivateProfileStringW
ExitThread
GlobalWire
HeapCompact
GetStartupInfoW
CreatePipe
GetCPInfoExW
GetWindowsDirectoryW
GetSystemWow64DirectoryA
WriteProfileSectionW
GetCalendarInfoW
IsDebuggerPresent
SetConsoleCursorPosition
GetLastError
DebugActiveProcess
lstrcmpW
WriteFile
GetNumberOfConsoleInputEvents
CopyFileW
FindNextChangeNotification
CreateActCtxA
SetMailslotInfo
GetPrivateProfileIntA
_lread
OutputDebugStringW
InterlockedDecrement
DefineDosDeviceA
SetVolumeMountPointA
EndUpdateResourceW
WriteConsoleA
InterlockedPushEntrySList
DeleteCriticalSection
TerminateProcess
GetConsoleMode
HeapSetInformation
FindActCtxSectionStringA
WriteProcessMemory
MoveFileExA
GetProcAddress
GlobalCompact
UnregisterWait
FormatMessageA
FatalExit
TransmitCommChar
WaitNamedPipeW
CreateIoCompletionPort
GetPrivateProfileStructA
FindResourceExA
EnumDateFormatsA
GetSystemInfo
EnumCalendarInfoExW
OpenSemaphoreA
GetMailslotInfo
lstrcpyW
SetThreadExecutionState
GetFileInformationByHandle
GetConsoleCP
SetConsoleScreenBufferSize
CreateMailslotA
EnumDateFormatsW
GetCommState
GetLogicalDrives
_lopen
GetConsoleAliasExesLengthW
GetWriteWatch
ClearCommBreak
ChangeTimerQueueTimer
GetSystemTime
GetOverlappedResult
WriteConsoleInputW
GlobalDeleteAtom
HeapSize
GetConsoleWindow
GetStringTypeA
SetFilePointer
PostQueuedCompletionStatus
SetFileApisToANSI
OpenWaitableTimerW
GetProcessId
PeekNamedPipe
FillConsoleOutputCharacterW
WriteProfileStringA
InitAtomTable
GlobalAddAtomA
WriteConsoleOutputCharacterA
TerminateJobObject
VirtualAlloc
GetBinaryTypeW
QueryDosDeviceW
LeaveCriticalSection
FileTimeToSystemTime
FileTimeToDosDateTime
Sleep
EnterCriticalSection
RaiseException
RtlUnwind
MoveFileA
GetStartupInfoA
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
GetCurrentProcess
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
SetLastError
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
FlushFileBuffers
DebugBreak
WriteConsoleW
LoadLibraryW
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoA
SetStdHandle
CloseHandle
CreateFileA
user32
OemToCharA
advapi32
GetFileSecurityW
msimg32
AlphaBlend
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 585KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wol Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ