Static task
static1
Behavioral task
behavioral1
Sample
debe12dbc9a7085f336927561c3b84fd21ef0cd456e2a094a9e3aacccded5320.exe
Resource
win10-en-20211208
General
-
Target
debe12dbc9a7085f336927561c3b84fd21ef0cd456e2a094a9e3aacccded5320
-
Size
378KB
-
MD5
0b3783c7759a16cca7c372ad4c611e2d
-
SHA1
afdf902100951de2220dd809fee78a24b2dc6756
-
SHA256
debe12dbc9a7085f336927561c3b84fd21ef0cd456e2a094a9e3aacccded5320
-
SHA512
1c7f4bed397d14af672a7ed594dd7eb179b5429caa3ddb2f8c6960f46cc1d90cfa2eea3c047c0c07a8a312fc6d6312248a7e8eba1ca91d8ac2553a4f6dc0788f
-
SSDEEP
6144:y+Vk8DafQ0y0JQedmi653/KbufjUr8tJRPmpz0epDl6Pw92/UZlR:ywD8DvJQpi65QufmQRPHepZ3922
Malware Config
Signatures
Files
-
debe12dbc9a7085f336927561c3b84fd21ef0cd456e2a094a9e3aacccded5320.exe windows x86
30d252c94c1c8260b58d3f525d7692c0
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetNamedPipeHandleStateW
DosDateTimeToFileTime
CallNamedPipeA
EnumResourceTypesA
EnumResourceNamesA
TerminateProcess
ReleaseActCtx
GetConsoleAliasesLengthA
GetVersionExA
GetConsoleOutputCP
GetDefaultCommConfigA
GetCommConfig
GetDriveTypeW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeW
LeaveCriticalSection
ReadConsoleInputA
TlsGetValue
SetComputerNameExA
FindAtomA
BuildCommDCBAndTimeoutsW
LoadLibraryA
GlobalAlloc
InitializeCriticalSection
GetCommandLineW
InterlockedIncrement
CopyFileA
ZombifyActCtx
OutputDebugStringW
FormatMessageA
GetPriorityClass
WritePrivateProfileStringA
HeapValidate
ExitThread
GlobalUnfix
GetProcessHeap
GetStartupInfoW
CreatePipe
GetCPInfoExW
GetWindowsDirectoryA
GetSystemWow64DirectoryA
WriteProfileSectionA
GetCalendarInfoW
ResumeThread
SetConsoleCursorInfo
SetLastError
ExitProcess
GetSystemTime
SetLocalTime
EnumCalendarInfoExW
OpenSemaphoreW
DebugActiveProcess
lstrcmpA
GetPrivateProfileSectionNamesA
GetNumberOfConsoleInputEvents
GetProcAddress
HeapLock
FindCloseChangeNotification
CreateActCtxA
GetMailslotInfo
GetPrivateProfileIntW
_lread
InterlockedDecrement
DefineDosDeviceW
SetVolumeMountPointA
EndUpdateResourceA
WriteConsoleA
VirtualProtect
FreeEnvironmentStringsW
SetMailslotInfo
lstrcpyA
VerLanguageNameW
UnlockFile
SetSystemTime
GetFileType
GetConsoleCP
GetConsoleAliasA
GetLargestConsoleWindowSize
GetOverlappedResult
FindAtomW
GetConsoleAliasExesLengthA
WriteConsoleInputA
CreateMailslotA
EnumDateFormatsW
SetCommState
LockFile
_lclose
GetConsoleAliasExesLengthW
ResetWriteWatch
CreateConsoleScreenBuffer
ClearCommBreak
ChangeTimerQueueTimer
HeapSize
MoveFileW
GetConsoleDisplayMode
GetSystemDefaultLangID
SetFilePointer
PostQueuedCompletionStatus
SetFileApisToOEM
OpenWaitableTimerW
GetProcessId
GetNamedPipeHandleStateA
FillConsoleOutputCharacterW
FindNextVolumeMountPointA
WriteProfileStringW
AddAtomA
WriteConsoleOutputCharacterW
QueryInformationJobObject
QueryDosDeviceA
EnterCriticalSection
InitAtomTable
VirtualAlloc
GetBinaryTypeA
GetSystemWindowsDirectoryA
GetLastError
CreateFileA
DeleteFileA
RaiseException
IsBadReadPtr
DeleteCriticalSection
GetModuleFileNameW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetHandleCount
GetStdHandle
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
WriteFile
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
LoadLibraryW
WideCharToMultiByte
GetConsoleMode
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
CloseHandle
user32
OemToCharA
advapi32
GetFileSecurityW
winhttp
WinHttpReadData
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hopara Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ