Static task
static1
Behavioral task
behavioral1
Sample
4797508E2-20F2-42C-879A-1C35.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4797508E2-20F2-42C-879A-1C35.exe
Resource
win10v2004-20220414-en
General
-
Target
a9f6f4a036a29fa164f0f74cef5fb57171ad599e04ec25b02a78c59cdcdecdd3
-
Size
216KB
-
MD5
d7b54b65df1fdbcc8dabdb642e3d6110
-
SHA1
02eaa6af47414a82d733372e540dc41157bb59a4
-
SHA256
a9f6f4a036a29fa164f0f74cef5fb57171ad599e04ec25b02a78c59cdcdecdd3
-
SHA512
baf3b74e1d7d5149e3b5bceecb59adbd8c327bb49f75fafe0896b1e8d8c7c9dd8d58a49c058c20503f017e0542a076880280b1b01e92d003bce1b252d25cc47a
-
SSDEEP
6144:3Vo1u90o7yEGVIkTvbbD6ak3sHIr3tfl5DfgAW1Ubg:SQIfVpTyL8HIbt/820
Malware Config
Signatures
Files
-
a9f6f4a036a29fa164f0f74cef5fb57171ad599e04ec25b02a78c59cdcdecdd3.zip
-
4797508E2-20F2-42C-879A-1C35.exe.exe windows x86
c93b0702003666378927bd84800bebf5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
MoveFileExA
WriteConsoleOutputCharacterA
GetVolumeInformationW
WriteFileEx
SetConsoleCursorInfo
GetStdHandle
VirtualProtect
SetConsoleCursorPosition
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SetEndOfFile
SetEnvironmentVariableA
CreateFileW
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
GetStringTypeW
LCMapStringW
CompareStringW
HeapSize
OutputDebugStringW
GetTimeZoneInformation
ReadConsoleW
ReadFile
WriteConsoleW
SetFilePointerEx
SetStdHandle
HeapReAlloc
HeapAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetProcessHeap
GetCurrentThreadId
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
GetModuleFileNameW
GetFileType
RtlUnwind
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
CloseHandle
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
UnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
DeleteCriticalSection
HeapFree
SetConsoleMode
rtm
RtmIsRoute
MgmTakeInterfaceOwnership
RtmAddRoute
RtmGetRouteAge
msi
ord43
ord158
ord19
ord112
ord113
ord98
ord14
msacm32
acmFilterChooseA
acmDriverOpen
acmFormatChooseW
acmFilterTagDetailsW
acmDriverDetailsW
acmStreamPrepareHeader
shlwapi
PathIsUNCServerW
StrChrIW
SHSetValueA
PathIsDirectoryW
ChrCmpIW
urlmon
URLOpenStreamA
CreateAsyncBindCtx
RegisterFormatEnumerator
IsValidURL
ReleaseBindInfo
RegisterMediaTypes
CoInternetGetSession
WriteHitLogging
MkParseDisplayNameEx
rtutils
RouterLogRegisterW
RouterLogDeregisterW
TraceVprintfExA
TraceDeregisterExA
RouterLogEventA
TraceRegisterExW
wsnmp32
ord500
ord905
ord903
ord102
ord100
ord503
ord300
ord402
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ