Static task
static1
Behavioral task
behavioral1
Sample
e1d879e9b873962cde3f42e555a2583eca3c135d1f63aebfbbf3dd95f77a30cf.exe
Resource
win7-20220414-en
General
-
Target
e1d879e9b873962cde3f42e555a2583eca3c135d1f63aebfbbf3dd95f77a30cf
-
Size
89KB
-
MD5
223f824fbc8cacd41d0e119034c1d043
-
SHA1
3b8e9eff67bc8f37431b26dbcde55e0c1767519d
-
SHA256
e1d879e9b873962cde3f42e555a2583eca3c135d1f63aebfbbf3dd95f77a30cf
-
SHA512
849c3d8345b4fcb22afc6786052e06cfa9cb5ac853a318e91be934dbeda7a15ebc068d2d6e2f8b2ad0d7fd88e30660f71703557512175808656c64e337d688e1
-
SSDEEP
1536:WXnxmCE8LtHvBUaHnolxA4/uJoUqV9PLFLl+KYzhg/RoXCF+FJ:Wv9L5BUuod5LljYzhg/RoyA
Malware Config
Signatures
Files
-
e1d879e9b873962cde3f42e555a2583eca3c135d1f63aebfbbf3dd95f77a30cf.exe windows x86
96738b098d2155292cff02a4e5c86e64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadContext
SetLocalTime
GetNumberOfConsoleInputEvents
FindResourceExW
BuildCommDCBAndTimeoutsA
WaitForSingleObject
GetTickCount
GetPriorityClass
GetPrivateProfileIntA
AddRefActCtx
GetConsoleMode
TerminateThread
GetPrivateProfileStructW
WritePrivateProfileStructW
CreateSemaphoreA
SetSystemPowerState
GetBinaryTypeW
lstrlenW
DeactivateActCtx
GetNamedPipeHandleStateW
GetLargestConsoleWindowSize
SetFileApisToOEM
GetLocalTime
LoadLibraryA
LocalAlloc
AddAtomW
SetCurrentDirectoryW
GetProfileStringA
SetSystemTime
VirtualProtect
CompareStringA
_lopen
CloseHandle
DebugBreak
lstrcpyW
GetStartupInfoW
RaiseException
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetListBoxInfo
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ