Static task
static1
Behavioral task
behavioral1
Sample
59bc91f38609631e71b97685bc751efc10fe0a022a457c72eb853b0a6a94381f.exe
Resource
win7-20220310-en
General
-
Target
59bc91f38609631e71b97685bc751efc10fe0a022a457c72eb853b0a6a94381f
-
Size
144KB
-
MD5
15df2bbb0fafeaddec2a60991f204868
-
SHA1
6f82a9d4c280ad033e9da26d3e1d3840d34179f2
-
SHA256
59bc91f38609631e71b97685bc751efc10fe0a022a457c72eb853b0a6a94381f
-
SHA512
8bef61d5a7a7138652f4af5cd9378e1bff0816bb5a5250f0ec6333d4ae79afa562e8eaad8749df7bd66961d5880e59fa4ef7887b461d9ad9ad0b99e96b9da54a
Malware Config
Signatures
Files
-
59bc91f38609631e71b97685bc751efc10fe0a022a457c72eb853b0a6a94381f.exe windows x86
3a86dd45d33dfda8536c62fef0fa87be
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
GetProcessHeap
LCMapStringW
CloseHandle
CreateFileW
WriteConsoleW
DecodePointer
VirtualProtectEx
Sleep
CreateEventW
GetVersion
GetSystemDirectoryW
HeapSize
GetVolumeInformationW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
RaiseException
user32
GetScrollInfo
LoadImageW
SystemParametersInfoW
SetWindowLongW
SetWindowsHookExW
GetClassNameW
LoadIconW
IsWindowEnabled
FrameRect
GetWindowTextLengthW
SetMenuItemInfoW
CallWindowProcW
CheckMenuRadioItem
CreateWindowExW
SetScrollInfo
RegisterClassExW
DrawIcon
IsWindow
DispatchMessageW
ClientToScreen
gdi32
StartPage
CreateDCW
DeleteDC
CreatePen
Rectangle
GetObjectW
RestoreDC
CreateFontIndirectW
ExtTextOutW
StartDocW
DPtoLP
BitBlt
ole32
CoCreateInstance
CoTaskMemAlloc
CLSIDFromString
CoInitialize
CoTaskMemFree
CoUninitialize
uxtheme
GetThemeTextExtent
CloseThemeData
netapi32
NetApiBufferFree
NetWkstaSetInfo
secur32
FreeContextBuffer
ImpersonateSecurityContext
InitializeSecurityContextW
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ