Static task
static1
Behavioral task
behavioral1
Sample
9b8ee39266f5e131f05768ed561f7dd4bed27df903fe71a276ad5a22af980f1f.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
9b8ee39266f5e131f05768ed561f7dd4bed27df903fe71a276ad5a22af980f1f.exe
Resource
win10v2004-en-20220113
General
-
Target
9b8ee39266f5e131f05768ed561f7dd4bed27df903fe71a276ad5a22af980f1f
-
Size
225KB
-
MD5
38d8196d6735ab2f722f5efa7a89deef
-
SHA1
98be4a8c94af03b163004198175068ae01f558d3
-
SHA256
9b8ee39266f5e131f05768ed561f7dd4bed27df903fe71a276ad5a22af980f1f
-
SHA512
8487675d8853dfcdad03240625655303a062e7e0c4122d19724caa4791ae8181ebeeb4a9e2bf0398039e081254acc94790b1e003070a79327559304ca7fb7dd3
Malware Config
Signatures
Files
-
9b8ee39266f5e131f05768ed561f7dd4bed27df903fe71a276ad5a22af980f1f.exe windows x86
56113b2660c4d3cabd856d98ed46990c
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetPriorityClass
SetThreadContext
TlsGetValue
SetLocalTime
GetUserDefaultLCID
_lcreat
SetTapeParameters
GetProcessPriorityBoost
GetTickCount
ReadConsoleW
ActivateActCtx
GlobalAlloc
GetPrivateProfileIntA
TerminateThread
Sleep
WritePrivateProfileStructW
GetBinaryTypeA
IsDBCSLeadByte
ReadFile
lstrcatA
CompareStringW
lstrlenW
EnumResourceNamesW
DeactivateActCtx
GetNamedPipeHandleStateW
IsDBCSLeadByteEx
GetProcAddress
GetTapeStatus
SetVolumeLabelW
ReadFileEx
GetConsoleDisplayMode
SearchPathA
DisableThreadLibraryCalls
GetLocalTime
LoadLibraryA
CreateSemaphoreW
SetConsoleDisplayMode
AddAtomA
GetPrivateProfileStructA
GetModuleHandleA
VirtualProtect
CloseHandle
lstrcpyW
lstrcpyA
SetThreadPriority
FileTimeToDosDateTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
GetCurrentProcessId
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetFileType
CreateFileA
HeapCreate
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
GetLocaleInfoW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
gdi32
GetCharWidthA
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ