Static task
static1
Behavioral task
behavioral1
Sample
34e619de046404d3aeb191bee99a5bc97ca4808e2afa1f3a8a3c3e028389bf27.exe
Resource
win7-20220414-en
General
-
Target
34e619de046404d3aeb191bee99a5bc97ca4808e2afa1f3a8a3c3e028389bf27
-
Size
2.6MB
-
MD5
a329c16a70ac8358873a86b686537e6f
-
SHA1
586b589ce774d8778f303d2a2a0f0a3edcc020b2
-
SHA256
34e619de046404d3aeb191bee99a5bc97ca4808e2afa1f3a8a3c3e028389bf27
-
SHA512
faa867337e45caec169af27369b519e217601baa9fa251f3cf49818dc284d7f2c0c03b98689f78003273f7c0546a1c1c5e570ab1b435d4480166f41d5a295bc9
-
SSDEEP
49152:KTAC87FDICkQPO0dCv54JRsFRC9rE7fTzDbVibwOp2ORmfdaAtJ:K8zDIGW4m4c7C9rE7fTDVdwjRmVaA
Malware Config
Signatures
Files
-
34e619de046404d3aeb191bee99a5bc97ca4808e2afa1f3a8a3c3e028389bf27.exe windows x86
9500074b611b2cd9a2c2f86214973a0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeNameForVolumeMountPointA
HeapReAlloc
SetupComm
CommConfigDialogA
lstrcpynA
_lwrite
SetConsoleScreenBufferSize
FlushViewOfFile
SetCommBreak
_lcreat
GetProcessPriorityBoost
GetTickCount
IsBadReadPtr
GlobalAlloc
WideCharToMultiByte
ReadFileScatter
SetSystemPowerState
EnumResourceLanguagesA
GetMailslotInfo
lstrcatA
GetVolumePathNameA
CreateMailslotW
GetProcAddress
GetPrivateProfileStringA
LoadLibraryA
IsWow64Process
SetConsoleOutputCP
AddAtomA
GetDefaultCommConfigA
WTSGetActiveConsoleSessionId
CreateIoCompletionPort
PurgeComm
FatalAppExitA
PeekConsoleInputA
GetThreadTimes
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
RaiseException
RtlUnwind
GetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
HeapSize
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
HeapAlloc
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LCMapStringW
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
user32
SetCaretPos
msimg32
AlphaBlend
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 32.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ