Static task
static1
Behavioral task
behavioral1
Sample
994ef8e517e3bb0bc5c72be81cbfd8eae6b8a8a63b60a5cff353b93ffbf61c54.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
994ef8e517e3bb0bc5c72be81cbfd8eae6b8a8a63b60a5cff353b93ffbf61c54.exe
Resource
win10v2004-en-20220113
General
-
Target
994ef8e517e3bb0bc5c72be81cbfd8eae6b8a8a63b60a5cff353b93ffbf61c54
-
Size
358KB
-
MD5
c150aaf0fb356efbf1b34741049f3341
-
SHA1
6575d204a7dfa327f824a8dc8fa3b408e4e6abf4
-
SHA256
994ef8e517e3bb0bc5c72be81cbfd8eae6b8a8a63b60a5cff353b93ffbf61c54
-
SHA512
c5f6e73eb7c832e1d539f9ab0d54b6b68119c79cca6571719e230dce95f1bd209c80186f742564e9b0abd185250cab94a09d98a3c281b0ee21ff8a768732ca64
Malware Config
Signatures
Files
-
994ef8e517e3bb0bc5c72be81cbfd8eae6b8a8a63b60a5cff353b93ffbf61c54.exe windows x86
68bbfc27af0ede5c12e87177be93b727
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
CreateActCtxA
HeapUnlock
GlobalAlloc
GetModuleHandleA
InterlockedExchangeAdd
WaitNamedPipeW
GetLastError
GetPrivateProfileSectionA
CancelDeviceWakeupRequest
EnterCriticalSection
LocalLock
WriteFile
SetFileShortNameW
ReadProcessMemory
OpenEventW
SetEvent
SetConsoleTextAttribute
SetConsoleTitleW
AllocConsole
LoadLibraryA
VirtualAlloc
GetFileAttributesW
GetAtomNameA
HeapAlloc
lstrcpyW
GetSystemDefaultLCID
GetConsoleAliasW
GetModuleHandleW
CreateMailslotW
GetCPInfoExA
SetEnvironmentVariableA
CommConfigDialogW
GetConsoleAliasesLengthW
DeleteTimerQueue
GetFileAttributesExA
SetCalendarInfoW
HeapLock
ReleaseMutex
WaitForSingleObject
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
HeapReAlloc
SetFilePointer
CloseHandle
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yamavoh Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gup Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jom Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gukare Size: 512B - Virtual size: 346B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ