Static task
static1
Behavioral task
behavioral1
Sample
Stone Quotation.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Stone Quotation.exe
Resource
win10v2004-20220414-en
General
-
Target
5c144627697438d385f2fe493ece0aa8edf19e106d195595f85f863b91c7a6bb
-
Size
373KB
-
MD5
70db7ce65a90d73ba6457e593c35ea44
-
SHA1
720e76524ec4ab96fe69b1e64cee2508942228d5
-
SHA256
5c144627697438d385f2fe493ece0aa8edf19e106d195595f85f863b91c7a6bb
-
SHA512
6c88c4972d50debbb06cbb625507bfba6cba17b533851fd03df8db67f3d7c797530065377f876abb23780b92d67514641a14fce1a1b35db8e6c9fef062813574
-
SSDEEP
6144:+htoVroBd8VDv0H5FVQK7S2RGUWc6H1DjqyOnTfUTpQVqnGhHy0Mol2g9MnaO:+oVme6HTJG6WcQFjsnTfUTaVGGhHtMgw
Malware Config
Signatures
Files
-
5c144627697438d385f2fe493ece0aa8edf19e106d195595f85f863b91c7a6bb.zip
-
Stone Quotation.exe.exe windows x86
a18a672aeeae86dc8783de7e30f7d80d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetProcAddress
LoadLibraryA
DecodePointer
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
GetStringTypeW
GetFileType
SetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
RaiseException
rpcrt4
NdrAsyncClientCall
RpcBindingInqObject
NdrVaryingArrayFree
RpcServerUseProtseqEpW
NdrConformantVaryingArrayUnmarshall
mswsock
SetServiceW
rexec
GetAddressByNameW
inet_network
TransmitFile
GetNameByTypeW
pdh
PdhExpandCounterPathW
PdhEnumObjectsW
PdhGetDefaultPerfCounterA
PdhVbIsGoodStatus
PdhOpenQueryW
loadperf
LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
mscms
InstallColorProfileA
SetColorProfileHeader
EnumColorProfilesW
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ