Static task
static1
Behavioral task
behavioral1
Sample
0d1af8185d92a0aa5ea518e783884ffbbd5b592454ed4082844ca06a0dadf1b3.exe
Resource
win7-en-20211208
General
-
Target
0d1af8185d92a0aa5ea518e783884ffbbd5b592454ed4082844ca06a0dadf1b3
-
Size
740KB
-
MD5
f2ebfd5e9e61d629d186432a1e2a0e27
-
SHA1
29cf0df3fa76e4b966eeb18000d953c1903a73e7
-
SHA256
0d1af8185d92a0aa5ea518e783884ffbbd5b592454ed4082844ca06a0dadf1b3
-
SHA512
66a76150529c1180caa3f0a2f672ce785de8f92c27499eaeab36cadb011cc9a77a552b7cc3b8d06199b1f68bfea7d3c1463f28986da7fa7453567c9c943f211b
-
SSDEEP
12288:1dRO2JxmdisyMfqbmy0wGaXCU58H0SJ2Ix65lCRpa1GjlEiRAfZunn:ZO2J9fuqbrsU9YPc7liey
Malware Config
Signatures
Files
-
0d1af8185d92a0aa5ea518e783884ffbbd5b592454ed4082844ca06a0dadf1b3.exe windows x86
51a3bba72932c7d065e2bc2f2ee59035
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleInputW
SetComputerNameExA
GetStringTypeA
OpenJobObjectA
ReadConsoleA
GetConsoleAliasA
InterlockedDecrement
GetProfileSectionA
EnumCalendarInfoExW
GetConsoleAliasesA
GetConsoleAliasesLengthA
CreateRemoteThread
SetFileTime
FindResourceExA
TerminateThread
GetLocaleInfoW
GetFileAttributesA
GetAtomNameW
GetModuleFileNameW
ReleaseSemaphore
GetLastError
GetProcAddress
GetLongPathNameA
VirtualAlloc
WriteConsoleA
LocalAlloc
DnsHostnameToComputerNameA
GetFileType
HeapLock
GetModuleFileNameA
GetDefaultCommConfigA
SetConsoleTitleW
GetModuleHandleA
GetConsoleTitleW
GetVersionExA
ReadConsoleInputW
ResetWriteWatch
CreateThread
CreateMailslotW
FileTimeToDosDateTime
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
SetHandleCount
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LoadLibraryA
CloseHandle
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
ReadFile
user32
SetCaretPos
advapi32
AdjustTokenGroups
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 598KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ