Static task
static1
Behavioral task
behavioral1
Sample
bin_2020-08-25_07-23.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
bin_2020-08-25_07-23.exe
Resource
win10v2004-20220414-en
General
-
Target
803be9f8bdd20ac8cb30333cd46963f54da7be3424a49cb73ce96dba07e10f80
-
Size
132KB
-
MD5
0b8dc825956b99e527006c5b5c66576a
-
SHA1
ab46481adfa6fa4de234b4b66cb6c9e66da4f9c9
-
SHA256
803be9f8bdd20ac8cb30333cd46963f54da7be3424a49cb73ce96dba07e10f80
-
SHA512
09e4ae1fa3300d97aad78d9c97fa32d9842c8f2c88fedac55d03c547193a0a43d315316f6f8d3cfe42e452c8f3e7278d2116fa3b83990eb840e8ce27ebec1f1a
-
SSDEEP
3072:LYdjyUCX1gmEEZJyi3DvqV70zCVwZ/fQ/z/nGi/zBtM:A+51czCqdxVanQjZbB+
Malware Config
Signatures
Files
-
803be9f8bdd20ac8cb30333cd46963f54da7be3424a49cb73ce96dba07e10f80.gz
-
bin_2020-08-25_07-23.exe.exe windows x86
a94f0931d84adaaf88f1501711220cd1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleTextAttribute
ReadConsoleA
WaitNamedPipeA
GetCurrentProcess
ZombifyActCtx
SetDefaultCommConfigW
GetSystemWindowsDirectoryW
SetEvent
SetTapeParameters
GetModuleHandleW
GetConsoleTitleA
GetWindowsDirectoryA
WriteFile
GetConsoleCP
GlobalAlloc
ReadConsoleInputA
SetConsoleCP
GetFileAttributesW
VerifyVersionInfoA
LocalReAlloc
GetAtomNameW
GetDevicePowerState
InterlockedExchange
ReleaseActCtx
InterlockedFlushSList
GetProcAddress
AttachConsole
GetTapeStatus
BeginUpdateResourceW
HeapUnlock
BuildCommDCBAndTimeoutsW
SetConsoleCtrlHandler
HeapLock
FoldStringA
GetCPInfoExA
lstrcpyA
lstrcpynA
CommConfigDialogA
TryEnterCriticalSection
CreateMutexW
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
GetLastError
HeapFree
RtlUnwind
HeapAlloc
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
SetFilePointer
CloseHandle
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
LoadLibraryW
WideCharToMultiByte
SetStdHandle
GetConsoleMode
FlushFileBuffers
LCMapStringW
WriteConsoleW
CreateFileW
advapi32
BackupEventLogW
BackupEventLogA
NotifyChangeEventLog
RegQueryValueExA
CloseEventLog
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 46.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gos Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ