Static task
static1
Behavioral task
behavioral1
Sample
1ea3c3acb4c6e533907cc7bdafd5cb4bd5e8294b717803e86b57c925d5992aef.exe
Resource
win7-20220414-en
General
-
Target
1ea3c3acb4c6e533907cc7bdafd5cb4bd5e8294b717803e86b57c925d5992aef
-
Size
5.0MB
-
MD5
79b2dce444347169977d7fa87137f839
-
SHA1
239779f6b48824a9e7626f6aa3c306c08eb244dd
-
SHA256
1ea3c3acb4c6e533907cc7bdafd5cb4bd5e8294b717803e86b57c925d5992aef
-
SHA512
73d68bf150662bb78ceb913dd54d5fe2414aed37769dd453102eb4ac9ea5fc565fbd45ecd9ba4e95422ba191ff0f8d1544d6fcb715b6c51fac5bbe1cc805346f
-
SSDEEP
98304:zyCuElChpHecupTiRh2qy+7mreY4Dc4t6TmOJqfc+5Beri:OkYxhAER7mrDmyqfnQ+
Malware Config
Signatures
Files
-
1ea3c3acb4c6e533907cc7bdafd5cb4bd5e8294b717803e86b57c925d5992aef.exe windows x86
5c1d35a09a315cf2221b4a2415bcfd1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionNamesW
TryEnterCriticalSection
GetDriveTypeW
SetEnvironmentVariableW
WaitForSingleObject
WaitForSingleObjectEx
GetModuleHandleW
ReadConsoleW
WaitNamedPipeW
EnumTimeFormatsW
GetCommandLineA
GlobalAlloc
GetSystemDirectoryW
GetFirmwareEnvironmentVariableA
FormatMessageW
SetConsoleCP
IsProcessorFeaturePresent
GetVolumePathNamesForVolumeNameW
ReplaceFileW
GetOverlappedResult
CreateDirectoryA
GetLastError
GetProcAddress
DefineDosDeviceW
LoadLibraryA
FindFirstVolumeMountPointW
CreateEventW
HeapLock
FindFirstChangeNotificationA
ExpandEnvironmentStringsW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
RaiseException
ReadFile
GetStringTypeW
LCMapStringW
HeapReAlloc
HeapSize
HeapFree
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapCreate
HeapDestroy
HeapAlloc
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetFilePointer
WriteConsoleW
SetStdHandle
FlushFileBuffers
IsValidLocale
user32
InvalidateRgn
GetScrollBarInfo
SetWindowTextA
FindWindowA
GetMessageTime
CloseDesktop
GetMessageExtraInfo
msimg32
AlphaBlend
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ