Static task
static1
Behavioral task
behavioral1
Sample
42ede32137e2dfccbe5a6c06da78b8814b14b521364250a948088442c7b5cedf.exe
Resource
win7-20220414-en
General
-
Target
42ede32137e2dfccbe5a6c06da78b8814b14b521364250a948088442c7b5cedf
-
Size
3.9MB
-
MD5
c3abfb427c8238dc3fb5a62fb9b048d5
-
SHA1
7fed650295f4b5ffe2388ac5e19b6cc3e4c16601
-
SHA256
42ede32137e2dfccbe5a6c06da78b8814b14b521364250a948088442c7b5cedf
-
SHA512
59ac9803102c17756338de539a718120cf95c44c4e2a5ef0bfa9d7aa5523d99ca9fd1784d3975581c401a5cc572aa04eb1380bcfc684a04011b85752f004661f
-
SSDEEP
98304:Daa507KSl1PMN0jBBAluICd2JbO1JrHDAG//:H4KSoN0jBWWWglAG3
Malware Config
Signatures
Files
-
42ede32137e2dfccbe5a6c06da78b8814b14b521364250a948088442c7b5cedf.exe windows x86
15d8fdf7a5fc94a0e91e4c97bf9b8280
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCriticalSectionSpinCount
GetCommModemStatus
GetNativeSystemInfo
lstrlenA
AllocConsole
GetCPInfo
BuildCommDCBAndTimeoutsA
WriteConsoleOutputW
SetWaitableTimer
LoadLibraryExW
InterlockedDecrement
ZombifyActCtx
SetDefaultCommConfigW
GetModuleHandleW
GetTickCount
GetConsoleTitleA
ReadConsoleW
CancelDeviceWakeupRequest
GetPriorityClass
GetEnvironmentStrings
GlobalAlloc
GetVolumeInformationA
LoadLibraryW
GetCalendarInfoW
FreeConsole
HeapValidate
LocalReAlloc
ReadFile
CreateActCtxA
GetStringTypeExA
GetConsoleAliasesW
AttachConsole
HeapUnlock
ResetEvent
LocalAlloc
SetConsoleCtrlHandler
LockResource
VirtualLock
HeapLock
FindAtomA
GetModuleFileNameA
WTSGetActiveConsoleSessionId
VirtualProtect
QueryDepthSList
GetSystemTime
CopyFileExA
lstrcpyA
CompareStringW
CompareStringA
GetTimeZoneInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
Sleep
GetProcAddress
ExitProcess
GetLastError
WriteFile
GetStdHandle
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentThread
HeapSize
RtlUnwind
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
HeapFree
CloseHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CreateFileA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
user32
RealChildWindowFromPoint
EndPaint
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ