Static task
static1
Behavioral task
behavioral1
Sample
16ccbb0d0f4e2c4ea94f282f38e84ef2fefd4115607f0445a0b0f72a8f607989.exe
Resource
win10-en-20211208
General
-
Target
16ccbb0d0f4e2c4ea94f282f38e84ef2fefd4115607f0445a0b0f72a8f607989
-
Size
440KB
-
MD5
3ca4082c1caf79ec63f6dad29fef9023
-
SHA1
4b219e86c9c4aec04b4b254848e93446e7576f09
-
SHA256
16ccbb0d0f4e2c4ea94f282f38e84ef2fefd4115607f0445a0b0f72a8f607989
-
SHA512
a64e7df6a0e0ea8464c93d48b08cdff472ddab5dd1a43314f4f1b5cdbe76271a450ff35278d2e15dd927e9ea3d3e3424218e45f455c03bdc5244891299fb0924
-
SSDEEP
12288:KxH95rKH3klJyff9TBetKpCvyv3c942+I:Y9C0lJYNB3CvUhlI
Malware Config
Signatures
Files
-
16ccbb0d0f4e2c4ea94f282f38e84ef2fefd4115607f0445a0b0f72a8f607989.exe windows x86
e33aaed5534409eaf34bcbf248be1fce
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
WriteProfileSectionA
GetNumaProcessorNode
FindFirstVolumeA
SetConsoleCursorInfo
HeapLock
FindFirstChangeNotificationA
WaitForSingleObject
GetNamedPipeHandleStateW
DosDateTimeToFileTime
CallNamedPipeW
EnumResourceTypesW
EnumResourceNamesA
TerminateProcess
ZombifyActCtx
GetConsoleAliasesLengthW
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
GetCommConfig
GetDriveTypeW
FreeEnvironmentStringsA
CreateTimerQueueTimer
FindNextVolumeW
LeaveCriticalSection
WriteConsoleInputW
TlsSetValue
SetComputerNameExW
FindAtomA
BuildCommDCBAndTimeoutsW
GlobalAlloc
EnterCriticalSection
TlsGetValue
GetCommandLineW
InterlockedExchange
CopyFileA
ReleaseActCtx
OutputDebugStringA
FormatMessageW
GetPriorityClass
WritePrivateProfileStringA
HeapSize
TerminateThread
GlobalUnfix
HeapCompact
GetStartupInfoA
CreatePipe
GetCPInfoExA
GetWindowsDirectoryA
GetSystemWow64DirectoryA
GetCalendarInfoW
DebugBreak
GetConsoleCursorInfo
SetLastError
DeleteVolumeMountPointW
DebugActiveProcessStop
lstrcmpA
GetPrivateProfileSectionNamesW
IsBadHugeWritePtr
GetProcAddress
GetSystemWindowsDirectoryA
FindCloseChangeNotification
CreateActCtxW
GetMailslotInfo
GetPrivateProfileIntA
_lread
InterlockedIncrement
DefineDosDeviceW
SetVolumeMountPointA
EndUpdateResourceW
WriteConsoleW
VirtualProtect
InterlockedPushEntrySList
TryEnterCriticalSection
GetFileAttributesExA
FileTimeToSystemTime
GetVolumePathNameA
GetConsoleMode
HeapWalk
GetComputerNameA
FindActCtxSectionStringW
WriteProcessMemory
MoveFileExA
DisableThreadLibraryCalls
GlobalCompact
UnregisterWait
DeleteAtom
FatalExit
InterlockedCompareExchange
WaitNamedPipeW
SetLocalTime
EnumCalendarInfoExA
OpenSemaphoreA
FreeEnvironmentStringsW
GetOverlappedResult
GetPrivateProfileStructA
SetMailslotInfo
lstrcpyW
VerLanguageNameW
LockFile
GetFileType
SetConsoleCP
GetConsoleAliasA
GetLargestConsoleWindowSize
CreateIoCompletionPort
FindAtomW
CreateMailslotW
EnumDateFormatsA
GetCommState
_lopen
GetConsoleAliasExesLengthA
GetWriteWatch
GetPrivateProfileStringA
ClearCommError
ChangeTimerQueueTimer
SetSystemTime
WriteConsoleInputA
GetFileInformationByHandle
GetLastError
SetFirmwareEnvironmentVariableA
MoveFileW
GetConsoleDisplayMode
GetSystemDefaultLangID
SetFilePointer
GetQueuedCompletionStatus
AreFileApisANSI
OpenWaitableTimerW
GetProcessVersion
GetNamedPipeHandleStateA
FillConsoleOutputCharacterA
FindNextVolumeMountPointW
WriteProfileStringA
InitAtomTable
AddAtomA
WriteConsoleOutputCharacterW
QueryInformationJobObject
QueryDosDeviceW
GetBinaryTypeW
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
InterlockedDecrement
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
LoadLibraryW
GetConsoleCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleA
CloseHandle
CreateFileA
user32
OemToCharW
winhttp
WinHttpReadData
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ