Static task
static1
Behavioral task
behavioral1
Sample
40e70983e6885ea29dd46403272ffbff012456f7f9987f66ef91420c7cdfb9cf.exe
Resource
win7-20220414-en
General
-
Target
40e70983e6885ea29dd46403272ffbff012456f7f9987f66ef91420c7cdfb9cf
-
Size
3.8MB
-
MD5
7b5159c05ee6872d1ae146584149530d
-
SHA1
eb3177fd6f357ba4c82f35057032b100806980a9
-
SHA256
40e70983e6885ea29dd46403272ffbff012456f7f9987f66ef91420c7cdfb9cf
-
SHA512
f3a0fc68e38450a35f1bf35fbf8c292bbb5c4b48f003dd3b3a648f2b2cc5e127e6f4e1699c2d26ae3138e0801a12306a03346306fabf93a0f78331c4c955b624
-
SSDEEP
98304:s1Pczvx6m8hvJ3t330QFuNaa2FtZHRv+rGSVuNR:s1svx6bh3t0QFuZ2LZVbSV
Malware Config
Signatures
Files
-
40e70983e6885ea29dd46403272ffbff012456f7f9987f66ef91420c7cdfb9cf.exe windows x86
e60104312d638d293e60844b4df939a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
AllocConsole
CommConfigDialogA
UpdateResourceA
SetWaitableTimer
WriteTapemark
SetConsoleTextAttribute
GetCommState
ZombifyActCtx
SetDefaultCommConfigW
GetEnvironmentStringsW
SetTapeParameters
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
IsBadReadPtr
GetConsoleTitleA
WaitNamedPipeW
WriteFile
QueryActCtxW
GetVolumeInformationA
LoadLibraryW
ReadConsoleInputA
GetCalendarInfoA
WriteConsoleOutputA
SetConsoleCP
GetFileAttributesA
HeapCompact
GetModuleFileNameW
GetTimeZoneInformation
CreateActCtxA
GetDevicePowerState
VirtualUnlock
GetStringTypeExA
VerifyVersionInfoW
InterlockedFlushSList
GetProcAddress
AttachConsole
GetTapeStatus
CreateConsoleScreenBuffer
HeapUnlock
InterlockedExchangeAdd
LocalAlloc
BuildCommDCBAndTimeoutsW
SetConsoleCtrlHandler
HeapLock
FindAtomA
SetSystemTime
LoadLibraryExA
DeleteCriticalSection
GetCPInfoExA
lstrcpyW
CopyFileExA
lstrcpyA
HeapReAlloc
CreateMutexW
lstrcpynW
PulseEvent
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
Sleep
HeapFree
FatalAppExitA
CloseHandle
CreateFileA
FreeLibrary
InterlockedExchange
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
HeapSize
LCMapStringW
GetStringTypeW
WriteConsoleW
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
gdi32
GetCharWidth32A
advapi32
BackupEventLogA
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yifa Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ