Static task
static1
Behavioral task
behavioral1
Sample
1766a1b4b45be76a433a3e9e7e308445dbd0d4c0bcf31438e98a7baff380ae24.exe
Resource
win10v2004-20220414-en
General
-
Target
1766a1b4b45be76a433a3e9e7e308445dbd0d4c0bcf31438e98a7baff380ae24
-
Size
510KB
-
MD5
956263f53a97d75e60270c1f857d688c
-
SHA1
aff5db433d0147b31b556c66759386a369bc6fb0
-
SHA256
1766a1b4b45be76a433a3e9e7e308445dbd0d4c0bcf31438e98a7baff380ae24
-
SHA512
3ead1e4cced2708951b76bdf10762bfe38111e1afb8c16b72bffad063ed0cf19436fc5b6afb6a1c76b2bf192e93eaff147315df156c735e8dd5991890ea6058a
-
SSDEEP
12288:k25m6JaGfKiowfrZBI2cOFk3F/kh66UPwP2n/YWCtaSHE:LmxqNfrzI2cPVB6QwkQW8a6
Malware Config
Signatures
Files
-
1766a1b4b45be76a433a3e9e7e308445dbd0d4c0bcf31438e98a7baff380ae24.exe windows x86
fb36cbf3daccf099a44d5983b13298b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigW
InitializeSListHead
SetHandleInformation
FreeEnvironmentStringsA
GetConsoleAliasesLengthA
GetCompressedFileSizeW
GetLocaleInfoW
SetSystemTimeAdjustment
GetConsoleAliasExesLengthW
GetFileAttributesW
SetTimeZoneInformation
GetAtomNameW
GetModuleFileNameW
GetVolumePathNameA
WritePrivateProfileStringW
CreateJobObjectA
GetLastError
IsDBCSLeadByteEx
GetLongPathNameA
HeapSize
CreateJobSet
SetConsoleTextAttribute
CreateMemoryResourceNotification
GetAtomNameA
LoadLibraryA
LocalAlloc
GetProfileStringA
BeginUpdateResourceA
GetCommMask
GetTapeParameters
GlobalFindAtomW
GetModuleHandleA
VirtualProtect
SetCalendarInfoA
GetCurrentProcessId
SetFileAttributesW
LCMapStringW
CompareStringW
CompareStringA
GetTimeZoneInformation
ReadFile
GetProcessHeap
SetLocalTime
FreeLibrary
EnumDateFormatsExW
WriteConsoleOutputCharacterW
SetFilePointer
SetPriorityClass
RemoveVectoredExceptionHandler
EnterCriticalSection
GetEnvironmentVariableW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
LeaveCriticalSection
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
RtlUnwind
HeapFree
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
SetConsoleCtrlHandler
InterlockedExchange
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
SetEndOfFile
SetEnvironmentVariableA
user32
GetMonitorInfoA
GetUserObjectInformationW
GetProcessDefaultLayout
GetClassLongW
gdi32
GetBoundsRect
advapi32
GetPrivateObjectSecurity
EqualSid
RegCreateKeyW
OpenEventLogW
PrivilegedServiceAuditAlarmA
GetEventLogInformation
Sections
.text Size: 467KB - Virtual size: 466KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ