Static task
static1
Behavioral task
behavioral1
Sample
7981bc361ea1943e7f59c311fca4a7b755ab1986dfac78b1f0a8a45c0d69c110.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
7981bc361ea1943e7f59c311fca4a7b755ab1986dfac78b1f0a8a45c0d69c110.exe
Resource
win10v2004-en-20220113
General
-
Target
7981bc361ea1943e7f59c311fca4a7b755ab1986dfac78b1f0a8a45c0d69c110
-
Size
201KB
-
MD5
0806b9dd009b8412f943c22bd1aee283
-
SHA1
4ecec62e67aa4fb2739d0f5e747dea8bb109fc0e
-
SHA256
7981bc361ea1943e7f59c311fca4a7b755ab1986dfac78b1f0a8a45c0d69c110
-
SHA512
d3c07d72f60a5e88acbc01c8dde100b1d31b44fa58eda5637b26d3f94b952bc671cd8ac62c841760b91a76ca3deb23a3aa49b23355b3b09cfe28c2b9df65dab7
Malware Config
Signatures
Files
-
7981bc361ea1943e7f59c311fca4a7b755ab1986dfac78b1f0a8a45c0d69c110.exe windows x86
fe27acff74fccda349ceca63572752d2
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadContext
OpenFile
SetLocalTime
GetNumberOfConsoleInputEvents
ReadConsoleA
GetNamedPipeHandleStateA
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
SetProcessPriorityBoost
TlsSetValue
GetPriorityClass
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleMode
SearchPathW
Beep
CreateSemaphoreA
TerminateProcess
lstrcatA
GetBinaryTypeW
lstrlenW
SetCurrentDirectoryA
GetProcAddress
GetTapeStatus
DisableThreadLibraryCalls
GetLocalTime
AddAtomA
GetTapeParameters
_lread
DebugBreak
lstrcpyW
EnumResourceNamesW
SetVolumeLabelA
GetPrivateProfileStructW
FileTimeToDosDateTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetFilePointer
GetConsoleCP
GetModuleHandleA
GetLocaleInfoW
FlushFileBuffers
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
gdi32
GetCharWidthW
advapi32
SetThreadToken
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ