Static task
static1
Behavioral task
behavioral1
Sample
0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f.exe
Resource
win10v2004-20220414-en
General
-
Target
0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f
-
Size
2.1MB
-
MD5
87fef0f85c5c16b33a18c2a1460dd705
-
SHA1
7cdd664980f3bf24cf01be79e66ef51dd047bf13
-
SHA256
0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f
-
SHA512
e3f67facc7ac3c7e00ff72e28d3243f4ee293de4fe3c220f19c8bff7f1be69ae7b575dda75a0646d1a48d40d986e966922472ea5a9ba3edea399803be9541e3c
-
SSDEEP
49152:Sa8LGJBfEgJVQj7FzkVNWy8Yvvuhyp7zxo+PFU+k4MiOYnfdo:Sa8LwBfXVQHFzkqyJvvuh+7zxfP/DMJj
Malware Config
Signatures
Files
-
0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f.exe windows x86
be8eb347704b261f68c71f7d3f555e65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
lstrcpynA
lstrcmpiA
lstrcmpA
lstrcatA
WritePrivateProfileStringA
WriteFile
WaitForSingleObject
Sleep
SetFileTime
SetFilePointer
SetFileAttributesA
CopyFileA
DeleteFileA
FindFirstFileA
CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateProcessA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
FindResourceA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetModuleHandleA
LocalAlloc
TlsGetValue
TlsSetValue
TlsAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
ExitThread
GetCurrentThreadId
HeapFree
HeapAlloc
RaiseException
RtlUnwind
SetUnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetOEMCP
GetProcAddress
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetVersionExA
GetCommandLineW
GetExitCodeProcess
InitializeCriticalSection
ResetEvent
SetEvent
VirtualFree
VirtualAlloc
WaitForMultipleObjects
LeaveCriticalSection
GetStdHandle
SetEndOfFile
ReadFile
GetFileSize
FindNextFileA
FindFirstFileW
FindClose
GetTempFileNameA
GetTempPathA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameW
GetFullPathNameA
DeleteFileW
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleFileNameA
IsDebuggerPresent
SetStdHandle
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
GetLocaleInfoA
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ