Static task
static1
Behavioral task
behavioral1
Sample
5200b197ef25d9a000ab00facba771866f6c7840015dde747a8cff6bd339d1af.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
5200b197ef25d9a000ab00facba771866f6c7840015dde747a8cff6bd339d1af.exe
Resource
win10v2004-20220331-en
General
-
Target
5200b197ef25d9a000ab00facba771866f6c7840015dde747a8cff6bd339d1af
-
Size
206KB
-
MD5
07d4d2455b31eb8ae419614350352d85
-
SHA1
26db33b36bf0eaa47f52b2a6768f3aa5529b8657
-
SHA256
5200b197ef25d9a000ab00facba771866f6c7840015dde747a8cff6bd339d1af
-
SHA512
eb8ff6ffd05718cf0d3ddfee2841feda523a130b67bdada87a0cad3f9818fb93c12000340ff64e626bb89e5917e569e487d17c7f701767ea94fda1af0e475e21
Malware Config
Signatures
Files
-
5200b197ef25d9a000ab00facba771866f6c7840015dde747a8cff6bd339d1af.exe windows x86
07405d21a8f91424e12553de11f67aa2
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeLabelA
SetPriorityClass
SetThreadContext
TlsGetValue
SetLocalTime
GetNumberOfConsoleInputEvents
GetUserDefaultLCID
_lcreat
SetTapeParameters
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
ReadConsoleW
SetProcessPriorityBoost
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleMode
Sleep
WritePrivateProfileStructW
GetBinaryTypeA
EnumResourceNamesW
ReadFile
lstrcatA
lstrlenW
SetThreadPriority
DeactivateActCtx
GetNamedPipeHandleStateW
GetProcAddress
GetTapeStatus
ReadFileEx
GetConsoleDisplayMode
SearchPathA
CreateSemaphoreW
LocalAlloc
SetConsoleDisplayMode
SetCurrentDirectoryW
AddAtomA
GetPrivateProfileStructA
CloseHandle
DebugBreak
lstrcpyW
TerminateProcess
FileTimeToDosDateTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentProcessId
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CreateFileA
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
HeapSize
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
SetFilePointer
SetEndOfFile
GetProcessHeap
LoadLibraryA
GetModuleHandleA
GetLocaleInfoW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
gdi32
GetCharWidthA
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ