Static task
static1
Behavioral task
behavioral1
Sample
2893c68ee07c67772d480554fc54e1a232dd0584847011e948e8e7cbc002c240.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
2893c68ee07c67772d480554fc54e1a232dd0584847011e948e8e7cbc002c240.exe
Resource
win10v2004-20220331-en
General
-
Target
2893c68ee07c67772d480554fc54e1a232dd0584847011e948e8e7cbc002c240
-
Size
148KB
-
MD5
898ad2ee345417f25e145cfab64eaf2b
-
SHA1
301e6504eb53429070654845b2667ddd5dbda4d8
-
SHA256
2893c68ee07c67772d480554fc54e1a232dd0584847011e948e8e7cbc002c240
-
SHA512
fb07d4ee7dfa7c71a5651b555abc790480cbf58ce83c6bf34e41b830103d6523baa6ee4b2a11a229d561b17a4d7eaffca3491bcf97aa191497d5c75d666a44cb
Malware Config
Signatures
Files
-
2893c68ee07c67772d480554fc54e1a232dd0584847011e948e8e7cbc002c240.exe windows x86
5434b37b46ff53409031fbbbb265a2ed
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleA
_lcreat
GetProcessPriorityBoost
GetTickCount
TzSpecificLocalTimeToSystemTime
GlobalAlloc
LoadLibraryW
GetConsoleMode
TerminateThread
SetSystemTimeAdjustment
CreateSemaphoreA
GetBinaryTypeA
lstrlenW
GetNamedPipeHandleStateW
GetPrivateProfileIntW
WriteTapemark
SetVolumeLabelW
GetLocalTime
LoadLibraryA
GetConsoleScreenBufferInfo
GetProfileStringA
AddAtomA
GetPrivateProfileStructA
GetTapeParameters
VirtualProtect
GetCurrentDirectoryA
CloseHandle
DebugBreak
GetSystemTime
lstrcpyW
SetPriorityClass
TlsGetValue
GetProcAddress
GetThreadContext
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
GetLastError
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
gdi32
GetBitmapDimensionEx
advapi32
RevertToSelf
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ