Static task
static1
Behavioral task
behavioral1
Sample
a4d3fc48e2a96e2dc10cf81acf99778a.exe
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
a4d3fc48e2a96e2dc10cf81acf99778a.exe
Resource
win10v2004-en-20220112
General
-
Target
a4d3fc48e2a96e2dc10cf81acf99778a.exe
-
Size
229KB
-
MD5
a4d3fc48e2a96e2dc10cf81acf99778a
-
SHA1
aed6c2b9e92e138d47bd89950b24c77692b243b5
-
SHA256
b17485bdb6b377c0c38ab3e2ab83572760ce6c09952506d9202a235b82021a68
-
SHA512
8ecfd5d2a8532385f8433eb1d3d5a17619d473b19e4907effc46b6d2e422adde55a70ee8edd02526f4d2caa2aa0e59f2c07c64d15682df9fe68741785297d2da
-
SSDEEP
3072:5YRNF2x6FE7jN6SkQF5Nzqey5sxkgaBChAyyM:urFRENH7N6+igavyyM
Malware Config
Signatures
Files
-
a4d3fc48e2a96e2dc10cf81acf99778a.exe.exe windows x86
907c8dc12dab258bb8f256a4965c3375
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
GetComputerNameW
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
SetFileTime
CreateActCtxW
GetEnvironmentStrings
LoadLibraryW
SwitchToFiber
ReadProcessMemory
DnsHostnameToComputerNameW
GetConsoleAliasW
WriteConsoleW
VerifyVersionInfoW
GetStdHandle
GetLongPathNameW
GetProcAddress
VirtualAlloc
HeapSize
PeekConsoleInputW
GetDefaultCommConfigW
EnterCriticalSection
SetFileAttributesA
GetAtomNameA
LoadLibraryA
LocalAlloc
SetCalendarInfoW
MoveFileA
GlobalGetAtomNameW
GetModuleFileNameA
LoadLibraryExA
GetConsoleTitleW
GetFileTime
GetVersionExA
GetVolumeNameForVolumeMountPointW
GetFileInformationByHandle
DebugBreak
GetTempPathA
ReadConsoleOutputCharacterW
LocalFree
EnumSystemLocalesW
LCMapStringW
GetLocaleInfoA
GetStringTypeA
WriteProfileSectionA
GetSystemDefaultLangID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
Sleep
ExitProcess
GetLastError
WriteFile
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
SetHandleCount
GetFileType
SetFilePointer
CloseHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
CreateFileA
gdi32
GetCharWidthFloatA
winhttp
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ