Static task
static1
Behavioral task
behavioral1
Sample
Dachser Consulta de cliente saliente no. 000150849 - SKBMT03082020-0012-IMG0149.exe
Resource
win7-20220414-en
General
-
Target
b2069e643e0a48cb2f2e8e4eab1e3d9701c29155b13d783fe0fef061dd9d5145
-
Size
285KB
-
MD5
b6d707ff8e7b46ac372a3b2f8c0197d0
-
SHA1
5e0a89349d98a6f81d1b9517dd5d51ffe950e0d7
-
SHA256
b2069e643e0a48cb2f2e8e4eab1e3d9701c29155b13d783fe0fef061dd9d5145
-
SHA512
f7303b63206e35468ed176e6da5264877793632bb62b2bee662c554f9ae574d00e9aabc476b14a08814f68dfe9bcc369f46a421c007a78e4ef0d65e02d5fe84c
-
SSDEEP
6144:jwPlFz2QtAxng3dVVbqCZ0gm0RiMDQiy8eFiirJtheAAB35Ez:j2lFzESN3bNmYPQ3JrJOe
Malware Config
Signatures
Files
-
b2069e643e0a48cb2f2e8e4eab1e3d9701c29155b13d783fe0fef061dd9d5145.rar
-
Dachser Consulta de cliente saliente no. 000150849 - SKBMT03082020-0012-IMG0149.exe.exe windows x86
7daf82a66fe36783e723cf4e0e9334b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
glu32
gluBeginTrim
gluBeginSurface
gluNurbsCurve
gluNurbsProperty
gluDeleteNurbsRenderer
gluTessEndPolygon
gluQuadricNormals
gluBuild2DMipmaps
gluOrtho2D
gluPwlCurve
gluGetString
kernel32
GlobalSize
GetNumberFormatA
GetModuleHandleA
WaitForMultipleObjects
GetUserDefaultLangID
VirtualProtect
HeapCreate
IsBadWritePtr
HeapAlloc
HeapFree
GetProcessHeap
LocalFree
FreeConsole
SetEndOfFile
WriteConsoleW
HeapReAlloc
HeapSize
GetCurrentDirectoryW
GetFileSizeEx
CloseHandle
CreateFileW
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
DeleteCriticalSection
LocalFlags
HeapUnlock
GlobalReAlloc
VirtualQueryEx
GetProcAddress
VirtualAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RaiseException
ReadFile
GetFullPathNameW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
SetFilePointerEx
ReadConsoleW
GetDriveTypeW
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
LCMapStringW
DecodePointer
netapi32
NetGetJoinInformation
NetGetJoinableOUs
NetAuditWrite
NetAuditRead
NetAuditClear
NetConfigSet
NetConfigGetAll
NetConfigGet
NetErrorLogWrite
Netbios
NetErrorLogClear
NetFileGetInfo
NetFileEnum
NetFileClose
NetConnectionEnum
NetGetAnyDCName
NetGetDCName
NetGroupAddUser
NetGroupAdd
NetErrorLogRead
crypt32
CryptStringToBinaryA
cryptui
CryptUIWizDigitalSign
CryptUIWizExport
CryptUIWizImport
CryptUIDlgViewContext
Sections
.text Size: 385KB - Virtual size: 385KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.bss Size: 221KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE