Static task
static1
Behavioral task
behavioral1
Sample
009dae0a4892cc0d44f4d230edb301d10cf37b76d724b546880f48c21a9d9563.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
009dae0a4892cc0d44f4d230edb301d10cf37b76d724b546880f48c21a9d9563.exe
Resource
win10v2004-20220414-en
General
-
Target
009dae0a4892cc0d44f4d230edb301d10cf37b76d724b546880f48c21a9d9563
-
Size
3.8MB
-
MD5
59a8ad9df39a24463e6f88be2f5658aa
-
SHA1
6c7d2b44eb640be26358eb7bbe68e5189accc329
-
SHA256
009dae0a4892cc0d44f4d230edb301d10cf37b76d724b546880f48c21a9d9563
-
SHA512
305ea17ef8531bb71e09d67c3253de8a4d3f2c9802c26a4c1605e2c1164dfb2a7b3d55123840692957ba9c107fb36e890eb1ed01b6a9826ea1c543efbfae1b3b
-
SSDEEP
98304:l9EAgv/J5kUO5Gm1mSFsBLG18v1Y2o/XDBBZ9XBneLHM5dn6t:lTUsFmNG18vG2QJ87M5d6
Malware Config
Signatures
Files
-
009dae0a4892cc0d44f4d230edb301d10cf37b76d724b546880f48c21a9d9563.exe windows x86
8b3732bc836ed14f938cde0b3b29474e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetConsoleTitleA
GetWindowsDirectoryA
FreeConsole
GetFileAttributesA
lstrcpynW
WriteConsoleW
GetACP
GetProcAddress
GetTapeStatus
GetProcessHeaps
ReadFileEx
VerLanguageNameW
SetEvent
LockResource
GetCommMask
GetModuleHandleA
GetStringTypeW
SetFileShortNameA
DeleteFileW
GetPrivateProfileSectionW
FindActCtxSectionStringW
GlobalReAlloc
WriteProcessMemory
LCMapStringW
lstrcpyA
SetHandleInformation
SetDefaultCommConfigW
WaitNamedPipeA
lstrlenA
DeleteTimerQueueEx
BuildCommDCBAndTimeoutsW
CreateMutexW
GetLastError
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
ExitProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
Sleep
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
HeapSize
SetStdHandle
MultiByteToWideChar
FlushFileBuffers
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileW
user32
GetCaretPos
advapi32
AdjustTokenPrivileges
BackupEventLogA
RegQueryInfoKeyA
DeregisterEventSource
RegQueryValueExW
MapGenericMask
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 74.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ