Static task
static1
Behavioral task
behavioral1
Sample
s.exe
Resource
win7-20220311-en
General
-
Target
s.exe
-
Size
269KB
-
MD5
28c2680f129eac906328f1af39995787
-
SHA1
6d2c4c44c130c00a9813e88b5856fa7129d71bcf
-
SHA256
8425ae333ccb3d734a5f33136a2102d5bfde0e96fa438ca9aba8425cc17a1bf4
-
SHA512
4758a8df8d045bbacca51cfabb1d01cb1570d411f3872c5b2dc983effd30de4f3562bd41419b73f9e6f4146a982c89e3eec8d6f0412f4ad70677909a8d372a2b
Malware Config
Signatures
Files
-
s.exe.exe windows x86
62cc0f071500a34baf4b74c917ef3797
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
OpenMutexW
SetLocaleInfoA
FindNextVolumeA
GetNamedPipeHandleStateA
FileTimeToLocalFileTime
EnumResourceTypesW
EnumResourceNamesA
FillConsoleOutputCharacterA
DeleteTimerQueueTimer
TerminateThread
SetLastError
SetEvent
FindNextFileW
CopyFileExA
BuildCommDCBA
FreeResource
GetVersionExA
ReadConsoleOutputCharacterW
SetDefaultCommConfigW
VerLanguageNameW
GetCommConfig
WritePrivateProfileStructA
LocalFree
FindNextVolumeMountPointA
GetWriteWatch
WriteConsoleInputW
LoadResource
AddAtomA
GlobalDeleteAtom
GetThreadPriority
CallNamedPipeA
GetDriveTypeW
BuildCommDCBAndTimeoutsW
GetProcAddress
GlobalAlloc
GlobalFix
FindFirstChangeNotificationA
VerifyVersionInfoA
FormatMessageA
SetDllDirectoryA
GetModuleHandleW
WritePrivateProfileStringW
GetUserDefaultLCID
SetDllDirectoryW
SetConsoleTextAttribute
InterlockedDecrement
GetStartupInfoA
CopyFileA
SetCalendarInfoW
DebugBreak
SetConsoleCursorInfo
GetSystemWow64DirectoryW
FreeLibraryAndExitThread
GetModuleFileNameA
WaitForDebugEvent
InterlockedExchangeAdd
GetOEMCP
GetPrivateProfileStringA
CreateActCtxA
ReadConsoleInputW
OutputDebugStringW
PulseEvent
SetThreadAffinityMask
FlushConsoleInputBuffer
lstrlenA
LoadLibraryW
WriteConsoleW
GetThreadContext
FreeEnvironmentStringsA
TryEnterCriticalSection
QueryDepthSList
DeleteFiber
SetProcessPriorityBoost
UnlockFile
FreeEnvironmentStringsW
GetConsoleCP
CreateIoCompletionPort
FreeConsole
GlobalGetAtomNameW
SetComputerNameA
GetConsoleAliasExesLengthW
CreateMailslotW
SetCommState
MoveFileWithProgressA
GetPrivateProfileIntA
GetSystemTimeAdjustment
EnumSystemLocalesW
OpenMutexA
GetLastError
WriteProfileStringW
OpenWaitableTimerW
GetConsoleAliasesLengthW
PeekNamedPipe
FillConsoleOutputCharacterW
BuildCommDCBAndTimeoutsA
GetConsoleAliasExesA
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
RtlUnwind
ExitProcess
MoveFileA
DeleteFileA
GetStartupInfoW
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetStdHandle
WriteFile
OutputDebugStringA
GetFileType
GetACP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
WideCharToMultiByte
GetConsoleMode
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CloseHandle
CreateFileA
user32
CharUpperA
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ