Static task
static1
Behavioral task
behavioral1
Sample
c94a31612090127ce13d55dfe361394086926a39b7199c99dbf0e5426d570063.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
c94a31612090127ce13d55dfe361394086926a39b7199c99dbf0e5426d570063.exe
Resource
win10v2004-en-20220113
General
-
Target
c94a31612090127ce13d55dfe361394086926a39b7199c99dbf0e5426d570063
-
Size
196KB
-
MD5
331c82fe3538a53691958a2fef5b8c23
-
SHA1
1ff18e283a4c5d2abc3e5f7063cf03a3bbf38860
-
SHA256
c94a31612090127ce13d55dfe361394086926a39b7199c99dbf0e5426d570063
-
SHA512
c9ed0565aa1829aa667ae6dfc79ca4882d6004c9e91c1b5ede429ece70f14490c36791e2df1bd672ed2fd288b43cbbe9dc4f77e7cc5088f654ca5deb9c6e74c3
Malware Config
Signatures
Files
-
c94a31612090127ce13d55dfe361394086926a39b7199c99dbf0e5426d570063.exe windows x86
4491e31a404abc4fa42fb53784437863
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
SetProcessPriorityBoost
TlsSetValue
GetPriorityClass
GlobalAlloc
GetPrivateProfileIntA
GetConsoleMode
GetPrivateProfileStructW
Beep
CreateSemaphoreA
TerminateProcess
lstrcatA
ReadConsoleA
lstrlenW
GetNamedPipeHandleStateW
SetCurrentDirectoryA
GetProcAddress
GetTapeStatus
SetVolumeLabelW
SearchPathA
DisableThreadLibraryCalls
GetLocalTime
LoadLibraryA
AddAtomA
GetTapeParameters
_lread
DebugBreak
lstrcpyW
OpenFile
GetNumberOfConsoleInputEvents
GetBinaryTypeW
GetThreadContext
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetModuleHandleA
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CloseHandle
FlushFileBuffers
gdi32
GetCharWidthA
advapi32
SetThreadToken
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ