Static task
static1
Behavioral task
behavioral1
Sample
056b7eb0c06645e1f51ed77f4fa18a4bed47135108371a84f0482f141ae0d769.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
056b7eb0c06645e1f51ed77f4fa18a4bed47135108371a84f0482f141ae0d769.exe
Resource
win10v2004-20220414-en
General
-
Target
056b7eb0c06645e1f51ed77f4fa18a4bed47135108371a84f0482f141ae0d769
-
Size
149KB
-
MD5
44a81be517e01ab33abdba541a239b6e
-
SHA1
2890c3be34e4189fe0a11b4e60ff2b3203fcdd2a
-
SHA256
056b7eb0c06645e1f51ed77f4fa18a4bed47135108371a84f0482f141ae0d769
-
SHA512
3361688b857d7e5db7fb5c9606a8e17c1487fb7e6dda9ed69d3c6c89ed94c51abb7e935971d35884bd71a8a55cc1bf436ea28997d404b50f91921895438515a0
-
SSDEEP
3072:MupWc+2g2yM2BSwgtNSGv551zDb/Wvn006luxHE:MupxMcBDSGlzDbuvn00c
Malware Config
Signatures
Files
-
056b7eb0c06645e1f51ed77f4fa18a4bed47135108371a84f0482f141ae0d769.exe windows x86
c07e3df57b355727f548e05ac8faa5e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
TerminateProcess
SetComputerNameExW
GetLastError
GetProcAddress
SetProcessWorkingSetSize
SetCommMask
GetProcessAffinityMask
VirtualProtect
CreateToolhelp32Snapshot
DuplicateHandle
LoadLibraryW
CloseHandle
GetFileInformationByHandle
GetThreadTimes
lstrcpyA
LocalFileTimeToFileTime
CreateFileA
GetLocaleInfoW
LoadLibraryA
GlobalAlloc
GetProcessTimes
EnumTimeFormatsA
GetDriveTypeA
EscapeCommFunction
GetModuleHandleW
GetCommProperties
GetCurrentProcess
SetConsoleTextAttribute
SetProcessShutdownParameters
ExitProcess
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetStdHandle
user32
GetScrollRange
GetPropW
PostMessageW
GetFocus
SetScrollRange
gdi32
EndPath
FillPath
advapi32
InitiateSystemShutdownW
GetUserNameA
GetSecurityDescriptorControl
LookupPrivilegeNameA
SetSecurityDescriptorControl
GetSecurityDescriptorDacl
msimg32
TransparentBlt
winhttp
WinHttpOpen
WinHttpCloseHandle
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ