Static task
static1
Behavioral task
behavioral1
Sample
Materials.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
Materials.exe
Resource
win10v2004-en-20220113
General
-
Target
78fe3ed0e50009101124d757b0ff13967a5eda787ddad427276779c4d343ce2c
-
Size
418KB
-
MD5
2a2278ac00e3b5729826f9f828a0b9ac
-
SHA1
d4d26ffd70753a9d81877a70477edfc13f2bfb18
-
SHA256
78fe3ed0e50009101124d757b0ff13967a5eda787ddad427276779c4d343ce2c
-
SHA512
2ddd27e3defb76d40ee887794a0683cd35af20828b0b7cbd82216b22dba18ac1a6456eb3f0942bf495259e0ba5b315126ea43886cc7b130b7bcbd54bf5bfc427
-
SSDEEP
6144:YNFf3hZqh0Lsgc+pkdWR65XtacANmctQesWVN:YNFfxZqCLsgnpkBXtac0m+QeHN
Malware Config
Signatures
Files
-
78fe3ed0e50009101124d757b0ff13967a5eda787ddad427276779c4d343ce2c.iso
-
Materials.exe.exe windows x86
82effcb96b522efcd146b3e80458c7de
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
remove
rename
rewind
scanf
exit
system
memcpy
strcpy
strcmp
toupper
_exit
_XcptFilter
printf
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fwrite
fseek
fread
fopen
fflush
fclose
__p___initenv
_getch
_getche
kernel32
GetConsoleWindow
SetConsoleCursorPosition
LoadLibraryW
GetProcessHeap
HeapAlloc
GetStdHandle
user32
GetWindowPlacement
DispatchMessageA
WaitMessage
ShowWindow
RemovePropA
DrawCaption
shlwapi
PathCanonicalizeW
StrCpyNW
PathUnquoteSpacesA
SHSetValueA
UrlEscapeW
ChrCmpIA
resutils
ResUtilIsPathValid
ResUtilResourceTypesEqual
ResUtilEnumPrivateProperties
ResUtilGetProperty
ResUtilSetDwordValue
winmm
waveInGetPosition
waveInAddBuffer
mmTaskYield
timeEndPeriod
wod32Message
rpcrt4
RpcBindingInqAuthInfoExA
NdrMapCommAndFaultStatus
RpcProtseqVectorFreeW
RpcSsSetClientAllocFree
I_RpcAsyncSetHandle
NdrContextHandleInitialize
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ