Static task
static1
Behavioral task
behavioral1
Sample
f59636192874b9735dc7a4cb55eb0aa64e5499df1e7154a807b3cc0a46e35572.exe
Resource
win7-20220311-en
General
-
Target
f59636192874b9735dc7a4cb55eb0aa64e5499df1e7154a807b3cc0a46e35572
-
Size
152KB
-
MD5
fdc04e9186fa3085fac12d029542ae33
-
SHA1
168d4d4614d89fa69bb9af26d7373ceae5ea09b3
-
SHA256
f59636192874b9735dc7a4cb55eb0aa64e5499df1e7154a807b3cc0a46e35572
-
SHA512
e3f3baa0331d371f22891288542ca04057f06cb0e288c2cb34e7e9ed008116e8f8361ea10dca6a1fd38bbc5093cf1981e51f79b2a128cd569cbf9bc742ad82c0
Malware Config
Signatures
Files
-
f59636192874b9735dc7a4cb55eb0aa64e5499df1e7154a807b3cc0a46e35572.exe windows x86
fe27acff74fccda349ceca63572752d2
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadContext
OpenFile
SetLocalTime
GetNumberOfConsoleInputEvents
ReadConsoleA
GetNamedPipeHandleStateA
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
SetProcessPriorityBoost
TlsSetValue
GetPriorityClass
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleMode
SearchPathW
Beep
CreateSemaphoreA
TerminateProcess
lstrcatA
GetBinaryTypeW
lstrlenW
SetCurrentDirectoryA
GetProcAddress
GetTapeStatus
DisableThreadLibraryCalls
GetLocalTime
AddAtomA
GetTapeParameters
_lread
DebugBreak
lstrcpyW
EnumResourceNamesW
SetVolumeLabelA
GetPrivateProfileStructW
FileTimeToDosDateTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetFilePointer
GetConsoleCP
GetModuleHandleA
GetLocaleInfoW
FlushFileBuffers
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
gdi32
GetCharWidthW
advapi32
SetThreadToken
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ