Static task
static1
Behavioral task
behavioral1
Sample
171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7.exe
Resource
win10v2004-20220310-en
General
-
Target
171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7
-
Size
279KB
-
MD5
753f89182804233389d9257938bc9e6b
-
SHA1
31cbf420a6dceea0d4a30163db9587d8ae99c03f
-
SHA256
171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7
-
SHA512
1c4028499e62c86aa6be55c1a2c2a0327c9a61b6a71c5aff4d1a2001d4ce753b46391aa1687378a13407c26b5b7bc853ac924fa7afa117337613bc4e1f753591
Malware Config
Signatures
Files
-
171f593c9c19bdea4cf5c120a1aaea3d0093486fdfc5cf67d433062ef161dbf7.exe windows x86
07405d21a8f91424e12553de11f67aa2
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeLabelA
SetPriorityClass
SetThreadContext
TlsGetValue
SetLocalTime
GetNumberOfConsoleInputEvents
GetUserDefaultLCID
_lcreat
SetTapeParameters
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
ReadConsoleW
SetProcessPriorityBoost
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleMode
Sleep
WritePrivateProfileStructW
GetBinaryTypeA
EnumResourceNamesW
ReadFile
lstrcatA
lstrlenW
SetThreadPriority
DeactivateActCtx
GetNamedPipeHandleStateW
GetProcAddress
GetTapeStatus
ReadFileEx
GetConsoleDisplayMode
SearchPathA
CreateSemaphoreW
LocalAlloc
SetConsoleDisplayMode
SetCurrentDirectoryW
AddAtomA
GetPrivateProfileStructA
CloseHandle
DebugBreak
lstrcpyW
TerminateProcess
FileTimeToDosDateTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentProcessId
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CreateFileA
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
HeapSize
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
SetFilePointer
SetEndOfFile
GetProcessHeap
LoadLibraryA
GetModuleHandleA
GetLocaleInfoW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
gdi32
GetCharWidthA
Sections
.text Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ