Static task
static1
Behavioral task
behavioral1
Sample
c3b1956078d866046d5adc72ca9a789bc927ad9ac5c78f7561ce1486bdf0268c.exe
Resource
win7-20220414-en
General
-
Target
c3b1956078d866046d5adc72ca9a789bc927ad9ac5c78f7561ce1486bdf0268c
-
Size
3.9MB
-
MD5
efe13634aff9b30cb883a896caf1fe5c
-
SHA1
25156c407fa7232ead17306db29cb7595aa9e747
-
SHA256
c3b1956078d866046d5adc72ca9a789bc927ad9ac5c78f7561ce1486bdf0268c
-
SHA512
a92c01151664b717edf47849517dfe15653efe4acb207d20050c1196ff882a76cc3503606515126ccd2278206c1558ceb9b2906396ddc5bbb2fd1c1102a93646
-
SSDEEP
98304:ldoeJ+5J1Nh3zYnrbRoL7aTse/AFULdEDb65:ldetNh3YrbRFZ/AK
Malware Config
Signatures
Files
-
c3b1956078d866046d5adc72ca9a789bc927ad9ac5c78f7561ce1486bdf0268c.exe windows x86
7273fe294d831d425a9c3b6457afc47e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommModemStatus
HeapCompact
GetNativeSystemInfo
lstrlenA
CopyFileExW
AllocConsole
WriteConsoleOutputW
SetWaitableTimer
LoadLibraryExW
SetConsoleTextAttribute
ZombifyActCtx
GetEnvironmentStringsW
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
IsBadReadPtr
GetSystemTimeAsFileTime
CancelDeviceWakeupRequest
WriteFile
QueryActCtxW
GlobalAlloc
SetDefaultCommConfigA
LoadLibraryW
GetCalendarInfoA
ReadFile
CreateActCtxA
VirtualUnlock
GetStringTypeExA
GetCPInfoExW
InterlockedFlushSList
GetProcAddress
AttachConsole
HeapUnlock
BuildCommDCBAndTimeoutsW
SetConsoleCtrlHandler
LockResource
HeapLock
GetModuleFileNameA
GetConsoleTitleW
DeleteCriticalSection
FindAtomW
lstrcpyA
GetVolumeInformationA
PulseEvent
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RaiseException
FatalAppExitA
CloseHandle
CreateFileA
FreeLibrary
InterlockedExchange
GetLocaleInfoW
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
FlushFileBuffers
SetEndOfFile
GetProcessHeap
HeapSize
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
gdi32
GetCharWidth32W
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 46.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mac Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mafodu Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kosuk Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gikar Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ