Static task
static1
Behavioral task
behavioral1
Sample
9a70811b6813db312d066302a240fbade95efad548c33ae8e6b06857bab4b090.exe
Resource
win7-20220414-en
General
-
Target
9a70811b6813db312d066302a240fbade95efad548c33ae8e6b06857bab4b090
-
Size
3.8MB
-
MD5
74b328b3692da088d6c8e9aa239d1b01
-
SHA1
6808bddeac01222b1c968f84efe3851e3d0b3eba
-
SHA256
9a70811b6813db312d066302a240fbade95efad548c33ae8e6b06857bab4b090
-
SHA512
89ef3363e4ef8efb3a29632f0a4bf023c85fda4fa844ec690e265542ec2578693e4b17f167b7a2133365bb28adfc5d2c60260d981ce4011709f4dc4c3aa9bee3
-
SSDEEP
98304:OHH4v78Tm0WdJ8CgeseCbWVusdaIQLyAAWax7:lv7PBgesevUqgyA
Malware Config
Signatures
Files
-
9a70811b6813db312d066302a240fbade95efad548c33ae8e6b06857bab4b090.exe windows x86
7ee154af652929f4da2b55569755e50d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocConsole
CommConfigDialogA
GetDefaultCommConfigW
UpdateResourceA
SetWaitableTimer
LoadLibraryExW
WriteTapemark
SetConsoleTextAttribute
GetCommState
ReadConsoleA
ZombifyActCtx
SetDefaultCommConfigW
GetEnvironmentStringsW
SetTapeParameters
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
IsBadReadPtr
GetConsoleTitleA
WaitNamedPipeW
WriteFile
GetVolumeInformationA
ReadConsoleInputA
GetCalendarInfoA
SetConsoleCP
DeleteVolumeMountPointW
GetFileAttributesA
lstrlenA
GetModuleFileNameW
GetTimeZoneInformation
CreateActCtxA
GetDevicePowerState
VirtualUnlock
GetStringTypeExA
VerifyVersionInfoW
InterlockedFlushSList
GetProcAddress
GetTapeStatus
CreateConsoleScreenBuffer
HeapUnlock
GetAtomNameA
InterlockedExchangeAdd
LocalAlloc
BuildCommDCBAndTimeoutsW
SetConsoleCtrlHandler
BeginUpdateResourceA
HeapLock
FindAtomA
SetSystemTime
DeleteCriticalSection
GetCPInfoExA
lstrcpyW
CopyFileExA
lstrcpyA
HeapReAlloc
CreateMutexW
lstrcpynW
PulseEvent
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
Sleep
HeapFree
FatalAppExitA
CloseHandle
CreateFileA
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
HeapSize
LCMapStringW
GetStringTypeW
WriteConsoleW
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
gdi32
GetCharWidth32A
advapi32
BackupEventLogA
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zavi Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ