Static task
static1
Behavioral task
behavioral1
Sample
10178bf1a33dde489d58b739550a686048a6c97c105bd62f47285ddd9d50e223.exe
Resource
win10-20220414-en
General
-
Target
10178bf1a33dde489d58b739550a686048a6c97c105bd62f47285ddd9d50e223
-
Size
301KB
-
MD5
bae226f40c3ce0aaf4f1da1fb15da342
-
SHA1
da926afee27a8d5b618299b4a98b22ae1787bbd5
-
SHA256
10178bf1a33dde489d58b739550a686048a6c97c105bd62f47285ddd9d50e223
-
SHA512
f3887e32b1fb7ee094e1a9128719089227190bfdbb8b68f81204034db523544e8f24f714958997aff6b35a3c2bae0139791fb776999a4eda5401b3e2110d8ca1
-
SSDEEP
6144:KXWL/1EGL0IrmgVd5XGYEGw6TnKeudfuwWGZGXXgDq4EvANH:/L1EGQe/d5X1TnKeOHWGZKoE
Malware Config
Signatures
Files
-
10178bf1a33dde489d58b739550a686048a6c97c105bd62f47285ddd9d50e223.exe windows x86
fb36cbf3daccf099a44d5983b13298b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigW
InitializeSListHead
SetHandleInformation
FreeEnvironmentStringsA
GetConsoleAliasesLengthA
GetCompressedFileSizeW
GetLocaleInfoW
SetSystemTimeAdjustment
GetConsoleAliasExesLengthW
GetFileAttributesW
SetTimeZoneInformation
GetAtomNameW
GetModuleFileNameW
GetVolumePathNameA
WritePrivateProfileStringW
CreateJobObjectA
GetLastError
IsDBCSLeadByteEx
GetLongPathNameA
HeapSize
CreateJobSet
SetConsoleTextAttribute
CreateMemoryResourceNotification
GetAtomNameA
LoadLibraryA
LocalAlloc
GetProfileStringA
BeginUpdateResourceA
GetCommMask
GetTapeParameters
GlobalFindAtomW
GetModuleHandleA
VirtualProtect
SetCalendarInfoA
GetCurrentProcessId
SetFileAttributesW
LCMapStringW
CompareStringW
CompareStringA
GetTimeZoneInformation
ReadFile
GetProcessHeap
SetLocalTime
FreeLibrary
EnumDateFormatsExW
WriteConsoleOutputCharacterW
SetFilePointer
SetPriorityClass
RemoveVectoredExceptionHandler
EnterCriticalSection
GetEnvironmentVariableW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
LeaveCriticalSection
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
RtlUnwind
HeapFree
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
SetConsoleCtrlHandler
InterlockedExchange
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
SetEndOfFile
SetEnvironmentVariableA
user32
GetMonitorInfoA
GetUserObjectInformationW
GetProcessDefaultLayout
GetClassLongW
gdi32
GetBoundsRect
advapi32
GetPrivateObjectSecurity
EqualSid
RegCreateKeyW
OpenEventLogW
PrivilegedServiceAuditAlarmA
GetEventLogInformation
Sections
.text Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ