Static task
static1
Behavioral task
behavioral1
Sample
b2c69402bbdd2f0b4cb424472de38ec42f1bebf837f86a71b0e2c82ffe511218.exe
Resource
win7-20220414-en
General
-
Target
b2c69402bbdd2f0b4cb424472de38ec42f1bebf837f86a71b0e2c82ffe511218.exe
-
Size
263KB
-
MD5
7d864335708caf3622fa3899c12032b4
-
SHA1
838e863a6964d75b256364cbedf3f5ff7e657c1f
-
SHA256
b2c69402bbdd2f0b4cb424472de38ec42f1bebf837f86a71b0e2c82ffe511218
-
SHA512
8d3a6824a8e79b373c09a11c75afde1d850b577e25f4d7a29fdcc1807c588f4313660ad278e3f24aef3ee0de4de90529feed3aef8bdca9e0c0885703dc84ec9a
-
SSDEEP
6144:G8n2FznABPrtg/z+5D9AADhJidrjgNo9Q6ReXAEO435knT+D9ao:lKGTt4z+5DyUUQlJkC
Malware Config
Signatures
Files
-
b2c69402bbdd2f0b4cb424472de38ec42f1bebf837f86a71b0e2c82ffe511218.exe.exe windows x86
caf905d16ba3d408b273230b90afe9ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileSize
SetDefaultCommConfigA
SetPriorityClass
WritePrivateProfileStructA
GetConsoleAliasesLengthW
CopyFileExW
GetConsoleAliasExesA
GetStringTypeA
GetDriveTypeW
DebugActiveProcessStop
lstrcpynA
GetConsoleAliasExesLengthA
BuildCommDCBAndTimeoutsA
SetDllDirectoryW
EndUpdateResourceW
InterlockedIncrement
_lwrite
VerSetConditionMask
MoveFileExW
GetConsoleAliasA
InterlockedDecrement
GetCurrentActCtx
GetSystemWindowsDirectoryW
GetNamedPipeHandleStateA
GetModuleHandleExW
SetConsoleScreenBufferSize
WriteConsoleInputA
GetLogicalDrives
CallNamedPipeW
FreeEnvironmentStringsA
SetTapeParameters
GetModuleHandleW
GetTickCount
GetConsoleTitleA
GetCompressedFileSizeW
ReadConsoleOutputA
GetDateFormatA
FindActCtxSectionStringA
EnumResourceTypesA
GetPrivateProfileIntA
AddRefActCtx
TerminateThread
ReadProcessMemory
GetSystemWow64DirectoryW
FormatMessageW
GetSystemTimeAdjustment
GetFileAttributesA
GetWriteWatch
GetFileAttributesW
VerifyVersionInfoA
GetBinaryTypeA
TerminateProcess
GetMailslotInfo
GetCompressedFileSizeA
GetSystemDirectoryA
GetTimeZoneInformation
SetComputerNameExW
CreateActCtxA
UnregisterWait
GetACP
GetVolumePathNameA
lstrlenW
FindNextVolumeMountPointW
SetThreadPriority
CreateMailslotW
GlobalUnfix
ReleaseActCtx
GetStartupInfoA
FillConsoleOutputCharacterW
GetLastError
CreateNamedPipeA
EnumDateFormatsExA
HeapUnlock
WriteProfileSectionA
CopyFileA
SetComputerNameA
EnterCriticalSection
GlobalGetAtomNameA
DisableThreadLibraryCalls
BuildCommDCBW
DefineDosDeviceA
ResetEvent
OpenWaitableTimerA
GetLocalTime
GetAtomNameA
LoadLibraryA
WriteConsoleA
ProcessIdToSessionId
RegisterWaitForSingleObject
LocalAlloc
GetFileType
WritePrivateProfileStringA
MoveFileA
SetCurrentDirectoryW
FindAtomA
SetSystemTime
GlobalWire
FindFirstChangeNotificationA
CreateWaitableTimerW
lstrcatW
FindNextFileW
GetStringTypeW
RequestWakeupLatency
VirtualProtect
EnumDateFormatsW
WaitForDebugEvent
OutputDebugStringA
SetCalendarInfoA
SetThreadAffinityMask
SetProcessShutdownParameters
Module32NextW
GetVersionExA
ReadConsoleInputW
TerminateJobObject
CloseHandle
GetCurrentProcessId
GetConsoleProcessList
FindNextVolumeA
GetOverlappedResult
GetThreadContext
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
WideCharToMultiByte
DeleteFileA
MultiByteToWideChar
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
GetCurrentProcess
IsDebuggerPresent
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
GetOEMCP
GetCPInfo
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
SetHandleCount
GetStdHandle
QueryPerformanceCounter
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
DebugBreak
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
SetFilePointer
LCMapStringA
LCMapStringW
GetLocaleInfoA
advapi32
ImpersonateSelf
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ