Static task
static1
Behavioral task
behavioral1
Sample
40a661d08299576603e8598dcbe52cd4.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
40a661d08299576603e8598dcbe52cd4.exe
Resource
win10v2004-en-20220112
General
-
Target
40a661d08299576603e8598dcbe52cd4.exe
-
Size
365KB
-
MD5
40a661d08299576603e8598dcbe52cd4
-
SHA1
793eb79c019a66ac6c58a6b464be11cdcfbb2958
-
SHA256
934a9881f22c30976cb47fdef452982f4dca6a0b94e67d2c64fe798850601771
-
SHA512
ef1030f30eb14e5c83c2f3e31f6af83b858e2d379d98d9d1f8333431d8226179fbe894ea6048bd21970a942f3786a3eddedc2989bd7e13b77970b1acc95c9ab8
-
SSDEEP
3072:xu7UhL7NEyahRUK3iM5kNnmZOAtpH1QiiAu/DCsZOFcDrNklhugMDUU6LH3JuGq:H7NDeyM5qmZhnVQ3CXSXNkLugMFvZ+h
Malware Config
Signatures
Files
-
40a661d08299576603e8598dcbe52cd4.exe.exe windows x86
d3c64d320cbca8e51ba61b2b44a22fc3
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetFileSize
CloseHandle
Sleep
GetModuleHandleA
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetLastError
lstrlenA
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
GetFileType
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
HeapFree
HeapAlloc
GetTimeZoneInformation
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
DecodePointer
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-errorhandling-l1-1-0
SetLastError
api-ms-win-core-synch-l1-1-0
InitializeCriticalSectionAndSpinCount
api-ms-win-core-processthreads-l1-1-0
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleW
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ