Static task
static1
Behavioral task
behavioral1
Sample
572eb88ef3e508c0556d55b4e7f649bd.exe
Resource
win7-20220310-en
General
-
Target
572eb88ef3e508c0556d55b4e7f649bd.exe
-
Size
237KB
-
MD5
572eb88ef3e508c0556d55b4e7f649bd
-
SHA1
a2251c07ea52e9886be15835d45eac41c24af78d
-
SHA256
bad62abd7ad29c3d1379bd06439b3208549ceff63772420104c1b322a4abc810
-
SHA512
8f9ed7ae2b94a3a6cb7e70a7192509d5dc8a8d728bedcdd01c2129608edbc0fc5c6b487733de72d54ba7dda438df7887381669466759d3e5bd8a8835b32335e9
Malware Config
Signatures
Files
-
572eb88ef3e508c0556d55b4e7f649bd.exe.exe windows x86
faaf45f51400f48ccc9484bc4fae33cf
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleA
HeapFree
AddConsoleAliasW
GetProcessHeap
GlobalAlloc
GetSystemDirectoryW
LoadLibraryW
SetVolumeMountPointA
GetVersionExW
GetAtomNameW
ReplaceFileA
GetPrivateProfileIntW
ReleaseActCtx
GetStdHandle
SetLastError
VirtualAlloc
AllocConsole
LoadLibraryA
WriteConsoleA
SetCalendarInfoW
SetConsoleCtrlHandler
SetEnvironmentVariableA
GetModuleFileNameA
GetDefaultCommConfigA
GetModuleHandleA
FreeEnvironmentStringsW
GetConsoleTitleW
VirtualProtect
CompareStringA
GetCPInfoExA
CloseHandle
CreateFileA
lstrlenA
GetConsoleAliasesLengthW
FindFirstChangeNotificationW
LocalUnlock
GetLocaleInfoA
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapAlloc
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
WindowFromPoint
gdi32
GetFontUnicodeRanges
advapi32
GetOldestEventLogRecord
winhttp
WinHttpCloseHandle
msimg32
AlphaBlend
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ