Static task
static1
Behavioral task
behavioral1
Sample
4f39a6eb76ad32e6265638b299df3f001292f14208d4b7dadc583577bfdd73ce.exe
Resource
win7-20220414-en
General
-
Target
4f39a6eb76ad32e6265638b299df3f001292f14208d4b7dadc583577bfdd73ce
-
Size
278KB
-
MD5
f256b883245baeb7fe91cfa0563a0d57
-
SHA1
e0b7d74982a2657303241d0b5497cc82bb6c1b77
-
SHA256
4f39a6eb76ad32e6265638b299df3f001292f14208d4b7dadc583577bfdd73ce
-
SHA512
bad2b3304cfa0be810abbb4d0e82da377e50a8f7f58d3ec997a9d2b6b703400e9d03fff3d78eabbbbe3118b2f9f6f931f8db8651bfd2ca4feb39ed21cc69bb78
-
SSDEEP
3072:3qnRKObRKvppjIkAYH3H95/qr1ftSAwgquzpppjTI2IVEzOGiHiZq5ZBfEYdt47I:3qwGtWgqutTI2IVOasDu8Lb344E2cm
Malware Config
Signatures
Files
-
4f39a6eb76ad32e6265638b299df3f001292f14208d4b7dadc583577bfdd73ce.exe windows x86
ef20de7cf568cbde313358f01f249856
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
Sleep
CloseHandle
GetTickCount
CreateProcessA
GetStartupInfoA
GetEnvironmentVariableA
GetCurrentDirectoryA
DeleteFileA
DecodePointer
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
WriteConsoleW
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapValidate
GetSystemInfo
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
CreateFileW
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
uxtheme
GetThemeTextExtent
GetThemeBackgroundRegion
GetThemeFont
OpenThemeData
CloseThemeData
mpr
WNetAddConnection2A
WNetGetUniversalNameA
WNetGetUserA
Sections
.text Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ