Static task
static1
Behavioral task
behavioral1
Sample
874c2077d9d9036ef76bd36bb444677a1d2a6e6aaa7f0dfdd91bd2e0972b84c6.exe
Resource
win7-20220414-en
General
-
Target
723de23d_by_Libranalysis
-
Size
240KB
-
MD5
723de23df8c1e63e0432742b29b7e68d
-
SHA1
9147ebd492d30c8634f06f8f8a805979a9312457
-
SHA256
dafba9329c6a80b19dae1e3ccf65b1a176b2ef9e7d085feabf75822d59d17515
-
SHA512
513a59c5a71715efbceffb417fb002ee29abd5a1af2028682ba8d41436c366a772a10e4a8012dcadd7f76ed4c40e04a09a435487871dd1b712f6d5c5cd33ce43
-
SSDEEP
6144:bLh8c+CT0yyIoMftvmAGa1vFILKz/MjVbjWCYyqsr4f:Xa/+oGddFWBbjW8qsrw
Malware Config
Signatures
Files
-
723de23d_by_Libranalysis.zip
Password: infected
-
874c2077d9d9036ef76bd36bb444677a1d2a6e6aaa7f0dfdd91bd2e0972b84c6.exe windows x86
Password: infected
dcc7b8a5850b79317210d7ff20f8c589
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LockResource
DeleteFileW
CloseHandle
LoadLibraryW
LoadResource
FindResourceW
GetProcAddress
LocalFree
IsProcessorFeaturePresent
GetCurrentProcessId
CreateProcessW
GetModuleHandleW
FreeLibrary
GetExitCodeProcess
GetFileAttributesW
SetLastError
FindNextFileW
Sleep
SetFileAttributesW
CopyFileW
OpenProcess
FlushFileBuffers
ReadFile
FindClose
MultiByteToWideChar
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
FreeResource
ResumeThread
GetCurrentThreadId
CreateFileW
WaitForSingleObject
SetEndOfFile
WaitForMultipleObjects
GetModuleFileNameW
WriteFile
GetCurrentProcess
GetCommandLineW
HeapSize
SizeofResource
SetStdHandle
WriteConsoleW
ReadConsoleW
GetProcessHeap
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
GetStringTypeW
EncodePointer
DecodePointer
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
LoadLibraryExW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
GetConsoleCP
GetConsoleMode
GetFileType
IsValidLocale
VirtualAllocEx
user32
LoadIconA
GetAsyncKeyState
GetDoubleClickTime
gdi32
CreateMetaFileA
GetStockObject
GetSystemPaletteUse
advapi32
RegOpenKeyW
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata5 Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata4 Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 930KB - Virtual size: 930KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ