Static task
static1
Behavioral task
behavioral1
Sample
me_2020-07-16_10-33.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
me_2020-07-16_10-33.exe
Resource
win10v2004-20220414-en
General
-
Target
ba167984676eeac1307b81f5410739ec309aad4ec2988d9e4266d1c6a449de9e
-
Size
144KB
-
MD5
d67f3775f1d531b12ed148311eef6e26
-
SHA1
d0f2c64e01ea3a1aaf395ac5866a953ec11aed1b
-
SHA256
ba167984676eeac1307b81f5410739ec309aad4ec2988d9e4266d1c6a449de9e
-
SHA512
b4cccac12ca02387939a04dfcc0a074cac184ea235fd6c9fd2114fcc210305e9874d7722c11de86aa4a48159f7411cc96456ec7e482876ed997ee92dace80122
-
SSDEEP
3072:qmpQo0zSEKx8jpXAW5ogFDFjiueq/fe36y7pVKyzI/iPlSdXS++:qAQ6x8tXZnrWueAe3g/4x
Malware Config
Signatures
Files
-
ba167984676eeac1307b81f5410739ec309aad4ec2988d9e4266d1c6a449de9e.gz
-
me_2020-07-16_10-33.exe.exe windows x86
afb1803734cc9f0d7a8202d88d0e53a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
SetEvent
GetModuleHandleW
GetEnvironmentStrings
GlobalAlloc
SetFileShortNameW
SetConsoleCP
GetGeoInfoA
GetACP
GetLastError
SetLastError
GetProcAddress
WaitForMultipleObjects
BuildCommDCBA
DeleteFileW
lstrcpyA
lstrcatA
lstrlenA
WideCharToMultiByte
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
CloseHandle
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetOEMCP
IsValidCodePage
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleHandleA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
advapi32
CloseEventLog
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 8.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ