Static task
static1
Behavioral task
behavioral1
Sample
8980000809000.exe
Resource
win7-20220414-en
General
-
Target
5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837
-
Size
210KB
-
MD5
fa5c9db3db2492e6cdb843291ea4ca6e
-
SHA1
78596ce6e3b747219bf855d828e96e6e4bacc08c
-
SHA256
5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837
-
SHA512
f0c9272b6b5761ec745f6cf65dea79c4dc9e330b1f8430050deff325461a26b1ff636e91d334d84fce531dd07a7d1112fa7d19f48d7ef3205c21aff41c916675
-
SSDEEP
6144:dwzA0Sng5Vnlp8OFHhe41OqSqEqxyXa3qbml5CddEL:qzA0SiAOFHhJ1OqrNym57L
Malware Config
Signatures
Files
-
5135acb4869394c48a11cd709be73b99085c066bb7a664902e96811b7b41a837.zip
-
8980000809000.COM.exe windows x86
bc5966a463e3eb6e754f16a51c8132da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
MoveFileExA
WriteConsoleOutputCharacterA
GetVolumeInformationW
WriteFileEx
SetConsoleCursorInfo
GetStdHandle
VirtualProtect
SetConsoleCursorPosition
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SetEndOfFile
SetEnvironmentVariableA
CreateFileW
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
GetStringTypeW
LCMapStringEx
CompareStringEx
HeapSize
LoadLibraryW
OutputDebugStringW
GetTimeZoneInformation
ReadConsoleW
ReadFile
WriteConsoleW
SetFilePointerEx
SetStdHandle
HeapReAlloc
HeapAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
QueryPerformanceCounter
GetModuleFileNameA
GetProcessHeap
GetCurrentThreadId
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
InterlockedIncrement
LoadLibraryExW
GetModuleFileNameW
InitOnceExecuteOnce
GetFileType
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetLastError
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetCommandLineA
UnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
HeapFree
Sleep
CloseHandle
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetConsoleMode
rtm
RtmIsRoute
MgmTakeInterfaceOwnership
RtmAddRoute
RtmGetRouteAge
msi
ord43
ord158
ord19
ord112
ord113
ord98
ord14
msacm32
acmFilterChooseA
acmDriverOpen
acmFormatChooseW
acmFilterTagDetailsW
acmDriverDetailsW
acmStreamPrepareHeader
shlwapi
PathIsUNCServerW
StrChrIW
SHSetValueA
PathIsDirectoryW
ChrCmpIW
urlmon
URLOpenStreamA
CreateAsyncBindCtx
RegisterFormatEnumerator
IsValidURL
ReleaseBindInfo
RegisterMediaTypes
CoInternetGetSession
WriteHitLogging
MkParseDisplayNameEx
rtutils
RouterLogRegisterW
RouterLogDeregisterW
TraceVprintfExA
TraceDeregisterExA
RouterLogEventA
TraceRegisterExW
wsnmp32
ord500
ord905
ord903
ord102
ord100
ord503
ord300
ord402
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ