Static task
static1
Behavioral task
behavioral1
Sample
3ef8f893bfba60ce3d400e7437856b813fcf69b24a1c37848963d052ecd0d9f9.exe
Resource
win7-20220414-en
General
-
Target
3ef8f893bfba60ce3d400e7437856b813fcf69b24a1c37848963d052ecd0d9f9
-
Size
264KB
-
MD5
05206e5eda097f54b8b1bcf23891ad80
-
SHA1
2325f3f2a146432526208e733718dff80a65e86e
-
SHA256
3ef8f893bfba60ce3d400e7437856b813fcf69b24a1c37848963d052ecd0d9f9
-
SHA512
df1a8558357d4b7aa9b812f5f078fa6dc00584c3b5413ea13087cb5d156f3b5d202d56a50925860dd00ebb7d4c6108d100384f68638b07415e5e569282e32879
-
SSDEEP
6144:40ruhJfheEUwfkvjfFIDfx+6GU7cuFKM203l:40ruhfeOKpU5X7AEl
Malware Config
Signatures
Files
-
3ef8f893bfba60ce3d400e7437856b813fcf69b24a1c37848963d052ecd0d9f9.exe windows x86
c464065912754227c6cd58b9d567090d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
QueryPerformanceCounter
GetWindowsDirectoryA
GetDateFormatA
OpenProcess
Sleep
SizeofResource
GetSystemDirectoryA
LockResource
GetModuleHandleA
VirtualProtect
GetCurrentDirectoryA
GetVersionExA
GetTempPathA
GetSystemTime
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
HeapAlloc
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
LoadLibraryExW
HeapReAlloc
LCMapStringW
GetStringTypeW
OutputDebugStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
LoadLibraryExA
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ