Static task
static1
Behavioral task
behavioral1
Sample
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813.exe
Resource
win7-en-20211208
General
-
Target
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813
-
Size
640KB
-
MD5
81843d9c10e65eeead6650766ba18d08
-
SHA1
618f493341aea26dc4d7c46dae854d5c1d56bcbf
-
SHA256
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813
-
SHA512
89a75dcb396ab86a4bb495ed14176b2f0a7b31949fbba02e8cdcb04967595269048dd95683391e16cd431c235ff90d5a62e616ac997cb9f983a7f358dc3dab63
-
SSDEEP
12288:EfloTD5vp3rZP0Jo7JsNhE115ElqKETI52SC61JtnjPxgb8mePwtxWfUMunn:BFvp3dP0KSNhE1f+dEM5n7tg3e4fdv
Malware Config
Signatures
Files
-
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813.exe windows x86
d3a97c61fc26bbf128da129c9758c519
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
HeapAlloc
EndUpdateResourceW
SetEnvironmentVariableW
HeapFree
GetEnvironmentStringsW
SetConsoleScreenBufferSize
AddConsoleAliasW
SetEvent
GetTickCount
GetProcessHeap
FindActCtxSectionStringA
Sleep
InitAtomTable
GetTapePosition
GetAtomNameW
GetMailslotInfo
GetModuleFileNameW
CreateActCtxA
GetConsoleOutputCP
BindIoCompletionCallback
GetProcAddress
VirtualAlloc
LoadLibraryA
WriteConsoleA
LocalAlloc
BeginUpdateResourceA
GetModuleFileNameA
GetProcessAffinityMask
Module32Next
FindNextVolumeA
TlsFree
lstrcpyA
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetLastError
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
WideCharToMultiByte
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReadFile
RtlUnwind
SetFilePointer
CloseHandle
ExitProcess
WriteFile
FreeEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
LoadLibraryW
WriteConsoleW
LCMapStringW
GetStringTypeW
HeapReAlloc
SetEndOfFile
CreateFileW
Sections
.text Size: 557KB - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cov Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ