Static task
static1
Behavioral task
behavioral1
Sample
0f88cfd80dda550bf8ed08966821d84f6344fa6110b248e1148f06109c9a9f96.exe
Resource
win7-20220311-en
General
-
Target
0f88cfd80dda550bf8ed08966821d84f6344fa6110b248e1148f06109c9a9f96
-
Size
148KB
-
MD5
b5fe6ec6895c1600e0b48a99cb9a6ca6
-
SHA1
4c111acc12de212f043ffa3cf1d1962236536c2e
-
SHA256
cbde76dfb68797accd9d4c909569bd925cca6bb5faaea32ee253bcac5494cb2e
-
SHA512
d56441cad10f95fd55dd5c79a3d9c75b8b50808a46d47614f17b21a43911aacd816dab4c864cc9462c482529a736329d571dc722aeefbf2a685222e9d15df68a
Malware Config
Signatures
Files
-
0f88cfd80dda550bf8ed08966821d84f6344fa6110b248e1148f06109c9a9f96.zip
-
0f88cfd80dda550bf8ed08966821d84f6344fa6110b248e1148f06109c9a9f96.exe windows x86
112f301b72f7079fdf51b59676b2b142
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
OpenMutexW
SetLocaleInfoA
FindNextVolumeA
GetNamedPipeHandleStateA
FileTimeToLocalFileTime
EnumResourceTypesW
EnumResourceNamesA
FillConsoleOutputCharacterA
DeleteTimerQueueTimer
TerminateProcess
SetLastError
SetEvent
FindNextFileW
CopyFileExA
BuildCommDCBA
FreeResource
GetVersionExA
ReadConsoleOutputCharacterW
SetDefaultCommConfigW
VerLanguageNameW
GetCommConfig
WritePrivateProfileStructA
LocalFree
FindNextVolumeMountPointA
GetWriteWatch
WriteConsoleInputW
LoadResource
AddAtomW
GlobalDeleteAtom
GetThreadPriority
CallNamedPipeA
GetDriveTypeW
BuildCommDCBAndTimeoutsW
GetProcAddress
GlobalAlloc
GetVersionExW
GlobalFix
FindFirstChangeNotificationW
VerifyVersionInfoA
FormatMessageA
SetDllDirectoryA
GetModuleHandleW
WritePrivateProfileStringW
GetUserDefaultLCID
TerminateThread
SetDllDirectoryW
SetConsoleWindowInfo
InterlockedDecrement
GetStartupInfoA
CopyFileA
SetCalendarInfoW
DebugBreak
SetConsoleCursorInfo
GetSystemWow64DirectoryW
FreeLibraryAndExitThread
GetModuleFileNameA
WaitForDebugEvent
InterlockedExchangeAdd
GetOEMCP
GetPrivateProfileStringA
CreateActCtxA
ReadConsoleInputW
OutputDebugStringW
PulseEvent
SetThreadAffinityMask
FlushConsoleInputBuffer
lstrlenA
LoadLibraryW
WriteConsoleW
GetThreadContext
FreeEnvironmentStringsA
TryEnterCriticalSection
QueryDepthSList
DeleteFiber
SetProcessPriorityBoost
UnlockFile
FreeEnvironmentStringsW
GetConsoleCP
CreateIoCompletionPort
FreeConsole
GlobalGetAtomNameW
SetComputerNameA
GetConsoleAliasExesLengthW
CreateMailslotW
GetCommState
MoveFileWithProgressA
GetPrivateProfileIntA
GetSystemTimeAdjustment
EnumSystemLocalesW
OpenMutexA
GetLastError
WriteProfileStringW
OpenWaitableTimerW
GetConsoleAliasesLengthW
PeekNamedPipe
FillConsoleOutputCharacterW
BuildCommDCBAndTimeoutsA
GetConsoleAliasExesA
Sleep
InterlockedIncrement
ExitProcess
MoveFileA
DeleteFileA
RaiseException
GetStartupInfoW
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
WriteFile
GetStdHandle
GetACP
GetCPInfo
IsValidCodePage
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle
FlushFileBuffers
user32
CharUpperW
Sections
.text Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ