Static task
static1
Behavioral task
behavioral1
Sample
782cebd33e7cc06a65d9869c356ce9fe15d6456f7e1753442c9c1229652c2799.exe
Resource
win7-en-20211208
General
-
Target
782cebd33e7cc06a65d9869c356ce9fe15d6456f7e1753442c9c1229652c2799
-
Size
607KB
-
MD5
42f0684b2175950eaa2912a87017736d
-
SHA1
0a6bdbf0add85eecee43c75d5af30a39289fa275
-
SHA256
782cebd33e7cc06a65d9869c356ce9fe15d6456f7e1753442c9c1229652c2799
-
SHA512
3e155363ca7746f4042c49d3bde7c3427d1099ba0e15ad4649ffc542377d4e5113d8616d30b66320bd086cb6ac9fd0a7ac43a98644aec4522765f0e4193ac8b7
-
SSDEEP
12288:4Rcn3fro29lloGN98NZLik8/ZWYK6u4Y0TQtkYXFnFmJb:4W3jhZoGN9af94Y3tFF0b
Malware Config
Signatures
Files
-
782cebd33e7cc06a65d9869c356ce9fe15d6456f7e1753442c9c1229652c2799.exe windows x86
60ac7a1fa68561a3b4c22b3ea42db989
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleInputW
GetConsoleAliasesLengthW
SetEndOfFile
MapUserPhysicalPages
EndUpdateResourceW
WaitForSingleObject
GetConsoleMode
GetLocaleInfoW
HeapValidate
ReleaseSemaphore
GetConsoleAliasesW
GetHandleInformation
SetLastError
GetThreadLocale
GetProcAddress
GetLongPathNameA
VirtualAlloc
GetFirmwareEnvironmentVariableW
GetLocalTime
LoadLibraryA
LocalAlloc
CreateHardLinkW
FindNextFileA
GetConsoleTitleW
CommConfigDialogW
WriteConsoleW
HeapReAlloc
DecodePointer
EncodePointer
GetModuleHandleW
ExitProcess
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapFree
CloseHandle
LoadLibraryW
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
SetStdHandle
RtlUnwind
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
HeapSize
RaiseException
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW
CreateFileW
user32
SetCaretPos
msimg32
GradientFill
Sections
.text Size: 539KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ