Static task
static1
Behavioral task
behavioral1
Sample
aa6d45515e85826488438d5257ccadc54bc2adad51c28b34a74bf6f82e7957e0.exe
Resource
win7-20220414-en
General
-
Target
aa6d45515e85826488438d5257ccadc54bc2adad51c28b34a74bf6f82e7957e0
-
Size
3.8MB
-
MD5
75b7ef1e1078db669732ed9c778539d1
-
SHA1
62b185a7bc12c6e92085ab5acd8dd98f7b829970
-
SHA256
aa6d45515e85826488438d5257ccadc54bc2adad51c28b34a74bf6f82e7957e0
-
SHA512
76c0abde2882f01801bdd4dd6bec17919e688f587ec28cd75bf1ba92735d5b3ba96194f0239973a427866b1bf745abc8253335f31b1369ebbfc3c84156289cb9
-
SSDEEP
98304:Y2d3dFIe3klpXGuQOY82MQl2/YwnMa/3piEClE/o7cDp:YQFIek258XQlF2/3piE0EkUp
Malware Config
Signatures
Files
-
aa6d45515e85826488438d5257ccadc54bc2adad51c28b34a74bf6f82e7957e0.exe windows x86
e60104312d638d293e60844b4df939a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
AllocConsole
CommConfigDialogA
UpdateResourceA
SetWaitableTimer
WriteTapemark
SetConsoleTextAttribute
GetCommState
ZombifyActCtx
SetDefaultCommConfigW
GetEnvironmentStringsW
SetTapeParameters
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
IsBadReadPtr
GetConsoleTitleA
WaitNamedPipeW
WriteFile
QueryActCtxW
GetVolumeInformationA
LoadLibraryW
ReadConsoleInputA
GetCalendarInfoA
WriteConsoleOutputA
SetConsoleCP
GetFileAttributesA
HeapCompact
GetModuleFileNameW
GetTimeZoneInformation
CreateActCtxA
GetDevicePowerState
VirtualUnlock
GetStringTypeExA
VerifyVersionInfoW
InterlockedFlushSList
GetProcAddress
AttachConsole
GetTapeStatus
CreateConsoleScreenBuffer
HeapUnlock
InterlockedExchangeAdd
LocalAlloc
BuildCommDCBAndTimeoutsW
SetConsoleCtrlHandler
HeapLock
FindAtomA
SetSystemTime
LoadLibraryExA
DeleteCriticalSection
GetCPInfoExA
lstrcpyW
CopyFileExA
lstrcpyA
HeapReAlloc
CreateMutexW
lstrcpynW
PulseEvent
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
Sleep
HeapFree
FatalAppExitA
CloseHandle
CreateFileA
FreeLibrary
InterlockedExchange
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
HeapSize
LCMapStringW
GetStringTypeW
WriteConsoleW
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
gdi32
GetCharWidth32A
advapi32
BackupEventLogA
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.caz Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ