Static task
static1
Behavioral task
behavioral1
Sample
fd47e20c094a1e23079eee41440b971162c1df668315b5e882c12805b9ec0c68.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
fd47e20c094a1e23079eee41440b971162c1df668315b5e882c12805b9ec0c68.exe
Resource
win10v2004-20220414-en
General
-
Target
fd47e20c094a1e23079eee41440b971162c1df668315b5e882c12805b9ec0c68
-
Size
250KB
-
MD5
b8dd3183755b57f5e18f29a0430b481e
-
SHA1
42485407433474d4fd2b6880eef4b49fa6c277d9
-
SHA256
fd47e20c094a1e23079eee41440b971162c1df668315b5e882c12805b9ec0c68
-
SHA512
8362fa5a3c3563b470ba06b49cfb662b7e114d77481bf656af3a1e71666ef26ad8d758776f075fe9c0634456f5c0b4a360016a75a3967b766cde8ab0449f5d31
-
SSDEEP
6144:oosTwZOhOOU6CleiB+VaRp5TIM5SaPhdMTSW6Hpi7UwWX65c:TgC1oaRpJ0abMTiHpw
Malware Config
Signatures
Files
-
fd47e20c094a1e23079eee41440b971162c1df668315b5e882c12805b9ec0c68.exe windows x64
029efa1c13112cc3652adb0f380ce5d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
SetStdHandle
HeapSize
WriteConsoleW
FlushFileBuffers
CreateFileW
GetProcAddress
GetModuleHandleExA
LCMapStringW
GetCurrentProcess
HeapAlloc
GetCommandLineA
GetLastError
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
IsDebuggerPresent
IsProcessorFeaturePresent
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
GetStringTypeW
CloseHandle
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ