Static task
static1
Behavioral task
behavioral1
Sample
2404dcaa9b9c98f537d2af7186c22e0565123b345207754cc273c8d39f1ceb9e.exe
Resource
win10v2004-20220414-en
General
-
Target
2404dcaa9b9c98f537d2af7186c22e0565123b345207754cc273c8d39f1ceb9e
-
Size
262KB
-
MD5
53c57d181f39609aabd8e119a9af8a40
-
SHA1
8fe705beaf3f5fa46c266ee99c16d12de8971b27
-
SHA256
2404dcaa9b9c98f537d2af7186c22e0565123b345207754cc273c8d39f1ceb9e
-
SHA512
8fe056954a770eb7d91d6667d84eb4985181f84b1d5ca3034a19981b47718b128d4f10780ff4f08fa641284c1b6a673f90ecb94119ede719e1fdf8d2db736ea0
-
SSDEEP
6144:SrMKURLAK+T0Z6vIDXNABWBX/NIfnDWZ6qTroOamA/:SZ6AKaI6vIDXNRYfD6Zrb
Malware Config
Signatures
Files
-
2404dcaa9b9c98f537d2af7186c22e0565123b345207754cc273c8d39f1ceb9e.exe windows x86
a916e8b0d7c2c6fa3f2d0e67400f5178
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateW
CreateIoCompletionPort
FillConsoleOutputCharacterW
SetThreadAffinityMask
GetExitCodeProcess
GetCurrentProcessId
GetVersionExA
EnumDateFormatsExW
FindNextFileW
CopyFileExW
BuildCommDCBAndTimeoutsA
DebugSetProcessKillOnExit
WriteProfileStringW
WritePrivateProfileStructA
FindFirstChangeNotificationW
SetPriorityClass
CreateTimerQueue
FindNextVolumeMountPointA
SetVolumeMountPointA
GetWriteWatch
ReadConsoleInputA
SetComputerNameExW
GetTimeZoneInformation
GetSystemDirectoryA
GetDriveTypeW
LoadLibraryA
GlobalAlloc
VerifyVersionInfoW
GetBinaryTypeA
ReleaseActCtx
InterlockedExchangeAdd
FindFirstChangeNotificationA
FormatMessageW
SetDllDirectoryA
WritePrivateProfileStringA
GetConsoleAliasesLengthW
GetProcessHeaps
CreateWaitableTimerW
UnlockFile
InterlockedIncrement
GetStartupInfoW
GetSystemWow64DirectoryW
SetLastError
GetConsoleAliasExesW
WaitForDebugEvent
EndUpdateResourceW
GetLastError
GetSystemTime
SetDefaultCommConfigW
VirtualFree
GlobalUnfix
GetSystemWindowsDirectoryW
CopyFileA
TerminateThread
GetACP
FindAtomA
HeapUnlock
EnterCriticalSection
CreateActCtxA
GetConsoleAliasW
_lwrite
GetOverlappedResult
CreateNamedPipeA
InterlockedDecrement
SetSystemTimeAdjustment
DefineDosDeviceW
GetAtomNameW
SetConsoleScreenBufferSize
EnumResourceTypesA
lstrlenW
LoadLibraryW
WriteConsoleA
VirtualProtect
GetModuleHandleW
ReadConsoleOutputA
GetThreadContext
BuildCommDCBW
AddRefActCtx
GetStringTypeW
WritePrivateProfileStringW
GetFileAttributesW
GetVolumePathNameA
MoveFileA
GetCommMask
CloseHandle
FreeEnvironmentStringsA
GetNamedPipeInfo
AttachConsole
GlobalGetAtomNameW
SetComputerNameA
GetConsoleAliasesA
WriteConsoleInputW
CreateMailslotA
TzSpecificLocalTimeToSystemTime
SetLocalTime
GetStringTypeA
EnumSystemLocalesW
CallNamedPipeW
GetConsoleAliasExesLengthW
CopyFileExA
GetPrivateProfileIntA
GetModuleHandleExW
FindActCtxSectionStringA
GetTickCount
OpenWaitableTimerA
GlobalWire
FillConsoleOutputCharacterA
GetCompressedFileSizeW
SetThreadPriority
FreeUserPhysicalPages
WriteConsoleOutputCharacterW
EnumDateFormatsA
TerminateJobObject
CreateFileA
GetDateFormatA
GetMailslotInfo
FindNextVolumeA
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
WideCharToMultiByte
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetOEMCP
GetCPInfo
IsValidCodePage
SetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
HeapCreate
HeapFree
GetModuleFileNameA
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
FlushFileBuffers
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetConsoleOutputCP
SetFilePointer
advapi32
ImpersonateSelf
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ