basketball
Static task
static1
Behavioral task
behavioral1
Sample
ae56c68519963679e6d0a248598f828bf3ba788895c50fab39dffabfadcfb201.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
ae56c68519963679e6d0a248598f828bf3ba788895c50fab39dffabfadcfb201.exe
Resource
win10v2004-20220414-en
General
-
Target
ae56c68519963679e6d0a248598f828bf3ba788895c50fab39dffabfadcfb201
-
Size
253KB
-
MD5
05e54bb1eb258389f3c3625f9c069d4b
-
SHA1
145207c2426ff8f66a02350fc2e35cf966912b0a
-
SHA256
ae56c68519963679e6d0a248598f828bf3ba788895c50fab39dffabfadcfb201
-
SHA512
1868c32abb102447d504895d89d1c7081a7ead0d25136ba2421afdce30a57cf8d243a54e64ab580ab1b8b8a2ee302402561c1d0452ed8fa9b5a8ed1a5f3c4bc6
-
SSDEEP
6144:UH1pBiIL1ow49vzdPqUIdmwH+6ZjFx60:UViIZow49vzdPqUSm5oBx3
Malware Config
Signatures
Files
-
ae56c68519963679e6d0a248598f828bf3ba788895c50fab39dffabfadcfb201.exe windows x86
ea8d6855bbbfcf4f5ef4cb753dd99445
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateW
LCMapStringA
GetLargestConsoleWindowSize
EnumSystemLocalesA
VerifyVersionInfoW
FindFirstFileA
BackupRead
GetProcAddress
GetTapeStatus
CreateTimerQueueTimer
HeapUnlock
VirtualProtectEx
BuildCommDCBW
GetProcessVersion
GetStringTypeExA
GetAtomNameA
RegisterWaitForSingleObject
CreateHardLinkW
TransmitCommChar
GetTapeParameters
DebugSetProcessKillOnExit
GetProcessShutdownParameters
OpenFileMappingW
GetPrivateProfileSectionA
VirtualProtect
LocalSize
DeleteAtom
SetConsoleTitleA
FindNextVolumeMountPointW
lstrlenW
Beep
GetFileAttributesA
GetConsoleWindow
LoadLibraryW
SetFileShortNameW
GlobalAlloc
GetDriveTypeA
GetCommandLineA
GetCurrencyFormatA
EnumCalendarInfoExW
GetTickCount
GetUserDefaultLCID
GlobalLock
GetCurrentProcess
FileTimeToDosDateTime
ReadConsoleA
LoadLibraryExW
lstrcmpA
GetPrivateProfileStringA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
IsProcessorFeaturePresent
HeapSize
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
IsValidLocale
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
advapi32
GetServiceDisplayNameA
GetSecurityDescriptorDacl
CloseEventLog
RegLoadKeyW
SetSecurityDescriptorSacl
GetLengthSid
AddAccessAllowedAce
SetServiceStatus
RegDeleteValueW
NotifyBootConfigStatus
LookupPrivilegeValueW
NotifyChangeEventLog
EqualSid
RegSetValueExA
CopySid
RegRestoreKeyA
OpenServiceW
SetServiceObjectSecurity
IsValidAcl
LookupPrivilegeNameW
GetCurrentHwProfileA
Exports
Exports
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ