Static task
static1
Behavioral task
behavioral1
Sample
ca1bfad71c506ae1a327eb928d2926997d43c4cfe7054d19db94dd889e47e4f3.exe
Resource
win10-20220414-en
General
-
Target
ca1bfad71c506ae1a327eb928d2926997d43c4cfe7054d19db94dd889e47e4f3
-
Size
184KB
-
MD5
023292af1454a0aa2348580c99cc81da
-
SHA1
a6139665324da316bdcdd40d996562b785e88c20
-
SHA256
ca1bfad71c506ae1a327eb928d2926997d43c4cfe7054d19db94dd889e47e4f3
-
SHA512
00f4f5fad5c619e8c2a606354f0fb83fd256f1a46d25fc6735c5807cffbeffc8c361e6a6801936c3126d1f7a956145fa6e51333874b2cc2a4b5d23713043b9ec
-
SSDEEP
3072:m0g/L7SGo/jco/NiDJi5eP6gTRX7NEbkyosoV5K0/pJ:mz/LO/ojHTRX7GcsG/H
Malware Config
Signatures
Files
-
ca1bfad71c506ae1a327eb928d2926997d43c4cfe7054d19db94dd889e47e4f3.exe windows x86
6ed3e1e1abd7428e917207642b1fc1f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetConsoleAliasesLengthA
GetCompressedFileSizeW
GlobalAlloc
GetLocaleInfoW
SetSystemTimeAdjustment
GetFileAttributesW
SetTimeZoneInformation
GetAtomNameW
GetModuleFileNameW
GetEnvironmentVariableA
GetVolumePathNameA
SetConsoleTitleA
WritePrivateProfileStringW
CreateJobObjectA
GetLastError
GetLongPathNameA
HeapSize
CreateJobSet
SetHandleInformation
CreateMemoryResourceNotification
GetAtomNameA
LoadLibraryA
GetProfileStringA
BeginUpdateResourceA
GetCommMask
GetModuleHandleA
VirtualProtect
GetCurrentDirectoryA
WaitForDebugEvent
SetCalendarInfoA
GetCurrentProcessId
SetFileAttributesW
LCMapStringW
CompareStringW
CompareStringA
GetTimeZoneInformation
ReadFile
GetProcessHeap
SetDefaultCommConfigW
InitializeSListHead
LoadResource
WriteConsoleOutputCharacterA
GetConsoleAliasExesLengthA
EnumDateFormatsExW
SetFilePointer
EnterCriticalSection
SetPriorityClass
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
LeaveCriticalSection
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
RtlUnwind
HeapFree
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
RaiseException
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
SetEndOfFile
SetEnvironmentVariableA
user32
GetMonitorInfoA
GetUserObjectInformationW
GetProcessDefaultLayout
GetClassLongW
gdi32
GetBoundsRect
advapi32
GetEventLogInformation
GetPrivateObjectSecurity
EqualSid
RegCreateKeyW
OpenEventLogW
PrivilegedServiceAuditAlarmW
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ