Static task
static1
Behavioral task
behavioral1
Sample
c32ebb0804370f418daa4093c4cb2ef81a5b0cd4b69f78d5316fd624dbb89fba.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
c32ebb0804370f418daa4093c4cb2ef81a5b0cd4b69f78d5316fd624dbb89fba.exe
Resource
win10v2004-20220310-en
General
-
Target
c32ebb0804370f418daa4093c4cb2ef81a5b0cd4b69f78d5316fd624dbb89fba
-
Size
201KB
-
MD5
84a756e63874418ad62808c01c4b7409
-
SHA1
fa66a84ae17ed4a78927780c5e975415293a4de0
-
SHA256
c32ebb0804370f418daa4093c4cb2ef81a5b0cd4b69f78d5316fd624dbb89fba
-
SHA512
e662910e397457ba3473fa4ab67466f288e62cdb11a6de1f93b9683a8897d2771f0c9403eb0005ede3b7278a77d3d5b9984ca457afcd4073a830e5471f7c738d
Malware Config
Signatures
Files
-
c32ebb0804370f418daa4093c4cb2ef81a5b0cd4b69f78d5316fd624dbb89fba.exe windows x86
65cdd970d73381f4b594a626a242a94a
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
SetLocalTime
GetNumberOfConsoleInputEvents
ReadConsoleA
GetNamedPipeHandleStateA
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
SetProcessPriorityBoost
TlsSetValue
GetPriorityClass
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleMode
GetPrivateProfileStructW
SetThreadContext
CreateSemaphoreA
TerminateProcess
lstrcatA
GetBinaryTypeW
lstrlenW
SetCurrentDirectoryA
GetProcAddress
GetTapeStatus
DisableThreadLibraryCalls
GetLocalTime
AddAtomA
GetTapeParameters
_lread
EnumResourceNamesA
DebugBreak
lstrcpyW
SetVolumeLabelA
SearchPathW
Beep
FileTimeToDosDateTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetFilePointer
GetConsoleCP
GetModuleHandleA
GetLocaleInfoW
FlushFileBuffers
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
gdi32
GetCharWidthW
advapi32
SetThreadToken
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ