Static task
static1
Behavioral task
behavioral1
Sample
f749f73e9013428ee973ef8885eadc653fc66f8e94e0f59f90e3065e9272fcc4.exe
Resource
win10-20220414-en
General
-
Target
f749f73e9013428ee973ef8885eadc653fc66f8e94e0f59f90e3065e9272fcc4
-
Size
317KB
-
MD5
97954dfdaadcfaecd653e5d037ab4c48
-
SHA1
9551ee8ddcade452861a98b66fb22de8d860715c
-
SHA256
f749f73e9013428ee973ef8885eadc653fc66f8e94e0f59f90e3065e9272fcc4
-
SHA512
c2a7d6e0023a3cb2954c467f10b5eb63cf9fe071f9e1e6726e78acfabe2fd66197fc97c2fa05c5704615935a38dca0f6ff057126b4b43ecbc27177653dda1314
-
SSDEEP
6144:xxoK7lwFZ5CqC7EvqfyeVBsJYuX3qW97Od3+Ap:xPpwzkECfyGydX3qWVOhR
Malware Config
Signatures
Files
-
f749f73e9013428ee973ef8885eadc653fc66f8e94e0f59f90e3065e9272fcc4.exe windows x86
17808cbb6f8026a5758f0bcd09768e68
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
OpenEventW
InterlockedIncrement
GetSystemDirectoryA
MoveFileExA
GlobalFree
GetCPInfoExA
BeginUpdateResourceA
EnumCalendarInfoExW
MoveFileA
CopyFileA
GetConsoleAliasesLengthW
LocalAlloc
GetProcAddress
EnumResourceNamesW
RemoveDirectoryW
CommConfigDialogW
SetFileAttributesA
SetCommTimeouts
OpenJobObjectW
LCMapStringA
GetAtomNameA
GetFileAttributesW
SetConsoleTitleW
ReplaceFileA
GetBinaryTypeA
GetShortPathNameW
GetUserDefaultLangID
GetGeoInfoW
GetConsoleAliasW
GetLastError
GetTickCount
GetCurrentProcess
FreeLibrary
GetEnvironmentStringsW
SetFileTime
FindResourceExW
SetConsoleMode
GetDiskFreeSpaceA
ResetEvent
WaitForMultipleObjects
SetDefaultCommConfigW
LoadLibraryW
WriteConsoleW
HeapFree
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
RtlUnwind
HeapAlloc
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
IsProcessorFeaturePresent
Sleep
HeapSize
GetModuleHandleW
ExitProcess
CloseHandle
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetFilePointer
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
LCMapStringW
GetStringTypeW
CreateFileW
gdi32
GetTextExtentPoint32A
ole32
CoRevokeMallocSpy
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jizixa Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.suhevuy Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ