Static task
static1
Behavioral task
behavioral1
Sample
32057fad31bfb5015fc818847d245cd144a3c8166ae377cc4143ee5795ac06e5.exe
Resource
win7-en-20211208
General
-
Target
32057fad31bfb5015fc818847d245cd144a3c8166ae377cc4143ee5795ac06e5
-
Size
655KB
-
MD5
5214689cb18baecfe0267940ad845398
-
SHA1
919514c68f7e009ddbb523fc17bbb2ba5604cac4
-
SHA256
32057fad31bfb5015fc818847d245cd144a3c8166ae377cc4143ee5795ac06e5
-
SHA512
a2b18ac30bf332c5f473b48f6a570013dc9e8ec51ed212032253226d620a7b8018a05d018d8a0eea32e51ad5382b2b519d54da6bdebab8bae5f72664e8f500b9
-
SSDEEP
12288:o/eG1b0DUtypE1ER+IIMBE4WgO7xJpI87/pMdBJqaDBSsvY/p:nZMylRfaIwMJ/vvY/p
Malware Config
Signatures
Files
-
32057fad31bfb5015fc818847d245cd144a3c8166ae377cc4143ee5795ac06e5.exe windows x86
52f3cbaa89ec222f54fb6ad33fd12ebf
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDefaultCommConfigW
LoadResource
GetSystemWindowsDirectoryW
QueryPerformanceCounter
GetEnvironmentStringsW
SetConsoleScreenBufferSize
BackupSeek
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
ReadConsoleW
GetFirmwareEnvironmentVariableA
GetProcessHandleCount
InitAtomTable
HeapValidate
HeapCompact
WriteConsoleW
DeactivateActCtx
LCMapStringA
GetConsoleOutputCP
SetLastError
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
GetAtomNameA
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetConsoleCursorInfo
DeleteAtom
AddConsoleAliasA
FindNextVolumeA
lstrcpyW
CommConfigDialogW
SetProcessAffinityMask
CreateFileW
GetLastError
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
HeapCreate
HeapFree
CloseHandle
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetCurrentProcessId
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
RaiseException
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
user32
ShowCursor
advapi32
AdjustTokenGroups
Sections
.text Size: 547KB - Virtual size: 547KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ