Static task
static1
Behavioral task
behavioral1
Sample
6463efd4789c770d191c9598c78f0ae5e45a997bee9ebbbcfca3fbba880f0cfe.exe
Resource
win10-20220414-en
General
-
Target
6463efd4789c770d191c9598c78f0ae5e45a997bee9ebbbcfca3fbba880f0cfe
-
Size
264KB
-
MD5
4a0e4dee1dc1e0156e03f94666cc8502
-
SHA1
3d4aa62c6481c703ca1b7f706aecd660ddad09cc
-
SHA256
6463efd4789c770d191c9598c78f0ae5e45a997bee9ebbbcfca3fbba880f0cfe
-
SHA512
1f4f5b8779725102e685c41d57a492fa9d881bb4206c3a6e7070312ec83dd6a7c2ba13a77ecf7ecd0723d1b0c0b0acd0bdea5e8047d6ec89334a71bcc0e75dc4
-
SSDEEP
6144:dsvUf8PkN/4YVBoQ/ZIDnh4Ay6+WJqC+pfEvu:dg/MlFVBoQmS4qZE
Malware Config
Signatures
Files
-
6463efd4789c770d191c9598c78f0ae5e45a997bee9ebbbcfca3fbba880f0cfe.exe windows x86
b7b553a94d11d69eb0b4828fda24cd7d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateW
CreateIoCompletionPort
FillConsoleOutputCharacterW
SetThreadAffinityMask
GetExitCodeProcess
GetCurrentProcessId
GetVersionExA
EnumDateFormatsExW
FindNextFileW
CopyFileExA
BuildCommDCBAndTimeoutsW
DebugSetProcessKillOnExit
WriteProfileStringW
WritePrivateProfileStructA
FindFirstChangeNotificationA
MapViewOfFileEx
CreateTimerQueue
FindNextVolumeMountPointA
SetVolumeMountPointW
GetWriteWatch
ReadConsoleInputA
SetComputerNameExW
SystemTimeToTzSpecificLocalTime
GetSystemDirectoryA
GetDriveTypeW
BuildCommDCBAndTimeoutsA
LoadLibraryA
GlobalAlloc
VerifyVersionInfoW
GetBinaryTypeA
ReleaseActCtx
InterlockedExchangeAdd
InterlockedDecrement
FormatMessageW
SetDllDirectoryA
GetNamedPipeHandleStateA
WritePrivateProfileStringA
GetConsoleAliasesLengthW
GetProcessHeaps
OpenWaitableTimerW
UnlockFile
InterlockedIncrement
GetStartupInfoW
GetSystemWow64DirectoryW
SetLastError
GetConsoleAliasExesW
ContinueDebugEvent
EndUpdateResourceA
GetLastError
GetStringTypeW
GetSystemTime
FlushConsoleInputBuffer
SetDefaultCommConfigW
VirtualFree
GlobalUnfix
GetSystemWindowsDirectoryW
CopyFileA
EnterCriticalSection
GetACP
FindAtomA
HeapUnlock
SetMailslotInfo
CreateActCtxA
GetConsoleAliasW
_lwrite
CreateNamedPipeA
SetSystemTimeAdjustment
DefineDosDeviceW
GetAtomNameW
SetConsoleScreenBufferSize
EnumResourceTypesA
lstrlenW
LoadLibraryW
MoveFileA
WriteConsoleA
VirtualProtect
GetModuleHandleW
ReadConsoleOutputA
GetThreadContext
BuildCommDCBW
AddRefActCtx
WritePrivateProfileStringW
GetFileAttributesW
MoveFileW
GetVolumePathNameW
GetCommMask
CloseHandle
GetNamedPipeInfo
FreeConsole
GlobalGetAtomNameW
SetComputerNameA
GetConsoleAliasesA
WriteConsoleInputW
CreateMailslotW
TzSpecificLocalTimeToSystemTime
SetLocalTime
GetStringTypeA
EnumSystemLocalesW
CallNamedPipeA
GetConsoleAliasExesLengthW
GetPrivateProfileIntA
GetModuleHandleExW
FindActCtxSectionStringA
GetTickCount
OpenWaitableTimerA
GlobalWire
FillConsoleOutputCharacterA
GetCompressedFileSizeW
SetThreadPriority
MapUserPhysicalPages
WriteConsoleOutputCharacterA
EnumDateFormatsA
TerminateJobObject
CreateFileW
GetDateFormatA
TerminateThread
FindNextVolumeA
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
WideCharToMultiByte
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetOEMCP
GetCPInfo
IsValidCodePage
SetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
HeapCreate
HeapFree
GetModuleFileNameA
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
FlushFileBuffers
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetConsoleOutputCP
SetFilePointer
CreateFileA
advapi32
ImpersonateSelf
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ