Static task
static1
Behavioral task
behavioral1
Sample
8564294725a57107809dbc67589a72adb4d256cddf8f05d6dd2d59b47ce96a9f.exe
Resource
win7-en-20211208
General
-
Target
8564294725a57107809dbc67589a72adb4d256cddf8f05d6dd2d59b47ce96a9f
-
Size
622KB
-
MD5
4967cfc6d90cfbcc091d072f1cfc5a73
-
SHA1
46eaa2da395a1bd0cd5a5a4651789c4fd4bac067
-
SHA256
8564294725a57107809dbc67589a72adb4d256cddf8f05d6dd2d59b47ce96a9f
-
SHA512
2471ad09cfd84d4cf5af142eeff2fa82a7572f7bde3168295671589dc3457e173a5a8c10050c9f90d2d91a2b2556ea0024d6667ce33de4f4941820a3bf5035ff
-
SSDEEP
12288:P5m8QndcTHr6eQU3azFgT7iTlnD2I641eGqZ0m6q0t0BHc/wW:QgTmeQCoiiZnD1ZqZit0BWw
Malware Config
Signatures
Files
-
8564294725a57107809dbc67589a72adb4d256cddf8f05d6dd2d59b47ce96a9f.exe windows x86
e8e4354c088377b008fc55fcf7a47fce
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
FindVolumeClose
HeapAlloc
EndUpdateResourceW
SetEnvironmentVariableW
GetEnvironmentStringsW
SetConsoleScreenBufferSize
AddConsoleAliasW
SetEvent
SleepEx
GetTickCount
GetProcessHeap
FindActCtxSectionStringA
InitAtomTable
GetTapePosition
WriteConsoleW
GetAtomNameW
GetMailslotInfo
GetModuleFileNameW
CreateActCtxA
GetConsoleOutputCP
BindIoCompletionCallback
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetProcessAffinityMask
Module32Next
FindNextVolumeA
TlsFree
lstrcpyA
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetLastError
HeapFree
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
WideCharToMultiByte
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReadFile
RtlUnwind
SetFilePointer
CloseHandle
ExitProcess
WriteFile
FreeEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
MultiByteToWideChar
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
LoadLibraryW
LCMapStringW
GetStringTypeW
SetEndOfFile
CreateFileW
Sections
.text Size: 557KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jadu Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ