_geek@8
Static task
static1
Behavioral task
behavioral1
Sample
b93187507fed6a52f34bac3af0675b88f672b2e7328dcb983434789050d74825.exe
Resource
win7-20220414-en
General
-
Target
b93187507fed6a52f34bac3af0675b88f672b2e7328dcb983434789050d74825
-
Size
121KB
-
MD5
e60119dd588f168109ae6d25a187202d
-
SHA1
0b3cde408aa8eea80fbf9a8868a6cd194dc2b022
-
SHA256
b93187507fed6a52f34bac3af0675b88f672b2e7328dcb983434789050d74825
-
SHA512
731ed02e9cb967bca1cddf93251ee607d499912df7dfbdf6720faa7339ea25674828d846052852b95bd4f4e8f1a7e287aa2883addd4eb6f1aaf75b13f59b9eac
-
SSDEEP
1536:ERexFMetpLxzMyxyMT9iU3os0zHMaDgqLJVkl4svQukkR8OMq:SeFTLdma9ivWaDgICfvXdR89q
Malware Config
Signatures
Files
-
b93187507fed6a52f34bac3af0675b88f672b2e7328dcb983434789050d74825.exe windows x86
f743ce0c78f71fda5cc340579f681f9c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
lstrlenA
WritePrivateProfileStructA
TlsGetValue
SetLocalTime
MoveFileExA
_llseek
GetNumberOfConsoleInputEvents
CallNamedPipeA
DeleteVolumeMountPointA
WriteTapemark
InterlockedIncrement
ReadConsoleA
CompareFileTime
WaitForSingleObject
_lclose
GetModuleHandleW
CreateNamedPipeW
VirtualFree
GetSystemTimeAsFileTime
WriteFile
FindResourceExA
GlobalAlloc
Sleep
LeaveCriticalSection
GetFileAttributesW
IsDBCSLeadByte
GetOverlappedResult
GetACP
DeactivateActCtx
GetLastError
IsDBCSLeadByteEx
GetProcAddress
GetTapeStatus
SetVolumeLabelA
LocalLock
ReadFileEx
SearchPathA
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
SetCalendarInfoW
IsSystemResumeAutomatic
SetConsoleDisplayMode
GetProfileStringA
SetFileApisToANSI
WriteProfileSectionW
GetTapeParameters
SetNamedPipeHandleState
SetSystemTime
EnumDateFormatsA
GetThreadPriority
WaitCommEvent
LoadLibraryExA
ContinueDebugEvent
CreateMutexA
VirtualProtect
PurgeComm
CompareStringA
GetConsoleCursorInfo
ScrollConsoleScreenBufferA
OpenSemaphoreW
GetVersionExA
DeleteFileW
DebugBreak
FindActCtxSectionStringW
lstrcpyW
CopyFileExA
GetPrivateProfileSectionNamesW
BeginUpdateResourceW
GetSystemDefaultLangID
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
RtlUnwind
RaiseException
HeapAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapSize
VirtualAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetModuleHandleA
gdi32
GetBoundsRect
GetBitmapDimensionEx
Exports
Exports
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 45.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ