Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-en-20220113
General
-
Target
tmp
-
Size
367KB
-
MD5
4755cfd6208be61c17281a0d15327d12
-
SHA1
6f6911fad162e14a62d692c834092560bb84c4d8
-
SHA256
19d07238694abc8194eb3320811df802f41ccea163b856e2f0f4930ef4225f2e
-
SHA512
a2a0e55a28876ee6e10b3ed324125fb1c02393568e3620117b90f5887f10cc839d717e902a9a637aac59e70a4da67810d690246b33d9ed09f6f38b8aedd2a0be
-
SSDEEP
6144:+odfKW4egDBPDXjJzUEPYN9Myk1bcdVMhuL6Xo:VKWbgV7XjJzxMhCbcdp
Malware Config
Signatures
Files
-
tmp.exe windows x86
7f6e7904dfe0f5704ba8b3d407bc8879
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetConsoleAliasesA
GetConsoleTitleA
InitializeCriticalSection
GetVolumePathNameW
LoadLibraryW
InterlockedPopEntrySList
LeaveCriticalSection
lstrcpynW
WriteConsoleW
LocalHandle
GetModuleFileNameW
SetLastError
GetLongPathNameA
MoveFileW
WriteProfileSectionA
LoadLibraryA
WriteConsoleA
GetProcessWorkingSetSize
LocalAlloc
IsWow64Process
GetModuleFileNameA
UpdateResourceW
GetConsoleTitleW
VirtualProtect
GetShortPathNameW
GetFileInformationByHandle
CreateThread
SetMailslotInfo
SetConsoleTextAttribute
SetFileAttributesA
GetConsoleAliasesLengthW
InterlockedIncrement
InterlockedDecrement
Sleep
DeleteCriticalSection
EnterCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapSize
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
RaiseException
WriteFile
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
MultiByteToWideChar
GetConsoleCP
GetConsoleMode
HeapReAlloc
SetStdHandle
FlushFileBuffers
LCMapStringW
CreateFileW
CloseHandle
gdi32
GetTextExtentExPointW
advapi32
ClearEventLogA
Sections
.text Size: 301KB - Virtual size: 301KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ