Static task
static1
Behavioral task
behavioral1
Sample
023f69ef6dae03563d033b53730b56c53cedcb376d253ada613fd98c9a9ee010.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
023f69ef6dae03563d033b53730b56c53cedcb376d253ada613fd98c9a9ee010.exe
Resource
win10v2004-20220414-en
General
-
Target
023f69ef6dae03563d033b53730b56c53cedcb376d253ada613fd98c9a9ee010
-
Size
314KB
-
MD5
35c571a5e2465bd7d7b8c3e3eca4eaed
-
SHA1
0e8ebcd8d1042a5f2d59c6439051dda41675e972
-
SHA256
023f69ef6dae03563d033b53730b56c53cedcb376d253ada613fd98c9a9ee010
-
SHA512
7c609be2fd889297d02581a21fe2560873373feb95545d77b385317da434ee20688b8891bf3bc1394210cf75b89fd543d477b6a34a4dfa4c5ef86597c05ae69d
-
SSDEEP
6144:6/8wNshaGQ509fgkVrcfwUWVBD1+qoXzrpc2/woiWP+7z5+dC:rwyYGY01gkxEWVyj+WPWN
Malware Config
Signatures
Files
-
023f69ef6dae03563d033b53730b56c53cedcb376d253ada613fd98c9a9ee010.exe windows x86
eb90529bd6b08ab31823ecfc23a6582c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Imports
kernel32
lstrcpyA
lstrcatA
lstrlenA
OpenSemaphoreW
CreateFileMappingA
LoadLibraryA
GetModuleFileNameW
GetProcessShutdownParameters
GetFirmwareEnvironmentVariableA
EnumResourceTypesA
EndUpdateResourceW
GetProfileStringA
WritePrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetCurrentDirectoryW
CreateDirectoryExW
DefineDosDeviceA
lstrcmpA
GetCompressedFileSizeW
DeleteFileW
SearchPathA
CopyFileW
IsBadStringPtrW
CommConfigDialogW
GetDefaultCommConfigW
OpenJobObjectA
QueryInformationJobObject
ReleaseActCtx
GetCalendarInfoA
GetSystemDefaultLCID
ReadConsoleInputW
ScrollConsoleScreenBufferW
WriteConsoleW
CreateMailslotW
GetNamedPipeInfo
FindClose
CancelDeviceWakeupRequest
UnlockFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetExitCodeProcess
HeapReAlloc
HeapAlloc
VirtualAlloc
GlobalFree
GlobalAlloc
GetFileAttributesExW
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
GetFileType
GetStringTypeW
DecodePointer
CloseHandle
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
LCMapStringW
SetStdHandle
GetProcessHeap
RaiseException
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
CreateFileW
user32
DestroyCursor
GetMonitorInfoW
advapi32
QueryServiceConfigW
RegQueryValueExW
RegQueryValueA
RegOpenKeyExW
RegCreateKeyW
RegCloseKey
GetFileSecurityA
GetSecurityDescriptorControl
AddAccessDeniedAce
GetAce
AreAllAccessesGranted
ObjectPrivilegeAuditAlarmA
ClearEventLogA
RegisterServiceCtrlHandlerA
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.satucez Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.coso Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ