Static task
static1
Behavioral task
behavioral1
Sample
9a1d070096bbfce57200bfd2c399f04678b3c3191d55c8b1ca64f49a0d64af21.exe
Resource
win7-20220414-en
General
-
Target
9a1d070096bbfce57200bfd2c399f04678b3c3191d55c8b1ca64f49a0d64af21
-
Size
3.8MB
-
MD5
3588cfa151e9f757b1e72f9fbd4de23f
-
SHA1
fa1d151a0d277988e7d8764096c017b61fa26265
-
SHA256
9a1d070096bbfce57200bfd2c399f04678b3c3191d55c8b1ca64f49a0d64af21
-
SHA512
a8e0a65b0f471d2d3b144fbd24d9822b37ef352097be4753dbe24993e4e8f6ed2df75850843fbcb969cffe2a38da18c0a526ccf20af4c9e2b901b7964d74611b
-
SSDEEP
98304:yoTrvPM/FgGkdokpQ7jargYgR0Zp7ORDhG4nmlwnYUSF9n:9fk/FN0a7jakQZQm4n0wnYUE
Malware Config
Signatures
Files
-
9a1d070096bbfce57200bfd2c399f04678b3c3191d55c8b1ca64f49a0d64af21.exe windows x86
e60104312d638d293e60844b4df939a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
AllocConsole
CommConfigDialogA
UpdateResourceA
SetWaitableTimer
WriteTapemark
SetConsoleTextAttribute
GetCommState
ZombifyActCtx
SetDefaultCommConfigW
GetEnvironmentStringsW
SetTapeParameters
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
IsBadReadPtr
GetConsoleTitleA
WaitNamedPipeW
WriteFile
QueryActCtxW
GetVolumeInformationA
LoadLibraryW
ReadConsoleInputA
GetCalendarInfoA
WriteConsoleOutputA
SetConsoleCP
GetFileAttributesA
HeapCompact
GetModuleFileNameW
GetTimeZoneInformation
CreateActCtxA
GetDevicePowerState
VirtualUnlock
GetStringTypeExA
VerifyVersionInfoW
InterlockedFlushSList
GetProcAddress
AttachConsole
GetTapeStatus
CreateConsoleScreenBuffer
HeapUnlock
InterlockedExchangeAdd
LocalAlloc
BuildCommDCBAndTimeoutsW
SetConsoleCtrlHandler
HeapLock
FindAtomA
SetSystemTime
LoadLibraryExA
DeleteCriticalSection
GetCPInfoExA
lstrcpyW
CopyFileExA
lstrcpyA
HeapReAlloc
CreateMutexW
lstrcpynW
PulseEvent
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
Sleep
HeapFree
FatalAppExitA
CloseHandle
CreateFileA
FreeLibrary
InterlockedExchange
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
HeapSize
LCMapStringW
GetStringTypeW
WriteConsoleW
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
gdi32
GetCharWidth32A
advapi32
BackupEventLogA
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.giziy Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ