Static task
static1
Behavioral task
behavioral1
Sample
51baa76cb69b58bb9c5d89dd0d410fb9e1ab18d763f85a94973786309a6b9744.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
51baa76cb69b58bb9c5d89dd0d410fb9e1ab18d763f85a94973786309a6b9744.exe
Resource
win10v2004-20220414-en
General
-
Target
51baa76cb69b58bb9c5d89dd0d410fb9e1ab18d763f85a94973786309a6b9744
-
Size
3.8MB
-
MD5
0d5405d0c31b0b5179c2d1623e7c3ac1
-
SHA1
bd9135dd36e3ea7ee7e6711db7cbf3c68db65fdc
-
SHA256
51baa76cb69b58bb9c5d89dd0d410fb9e1ab18d763f85a94973786309a6b9744
-
SHA512
0da93164a3619a52d8f9c82de2d7697cc490e775787bfc22963852fa27edc7b93d0a09d2b154783c175f00a8247f0cbcbd6f69f1bc71b52a7a8a67915192def2
-
SSDEEP
98304:JqPupnjx4OPbx+M3L4QFkBdIQ44isNnAVejiQ:Joul4Q+M39FqW4lji
Malware Config
Signatures
Files
-
51baa76cb69b58bb9c5d89dd0d410fb9e1ab18d763f85a94973786309a6b9744.exe windows x86
9d4d6214a499e2ef97dc51521cd54afe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
SetEvent
GetTickCount
GetProcessHeap
VirtualQueryEx
GetCommandLineA
GetProcessTimes
GlobalAlloc
GetConsoleMode
GetStringTypeExW
GetTimeFormatW
TerminateProcess
CreateActCtxA
lstrcatA
ZombifyActCtx
GetProcAddress
CreateEventW
SetProcessWorkingSetSize
GetModuleHandleA
GetCommTimeouts
UpdateResourceW
FindActCtxSectionStringW
DeleteFileA
_lwrite
LoadResource
GetProcessIoCounters
GetDefaultCommConfigW
SetEndOfFile
GetNumaNodeProcessorMask
FlushFileBuffers
DebugActiveProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
IsProcessorFeaturePresent
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
GetModuleHandleW
SetLastError
GetCurrentThreadId
HeapFree
Sleep
RaiseException
WriteConsoleW
MultiByteToWideChar
SetStdHandle
ExitProcess
RtlUnwind
LCMapStringW
GetStringTypeW
HeapAlloc
CreateFileW
CloseHandle
GetModuleFileNameW
LoadLibraryW
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 50.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ