Static task
static1
Behavioral task
behavioral1
Sample
18086cc4cebf9eb9eaf8dc5ce9192a7f0a759c412d1b55935bfb0143bd60c55f.exe
Resource
win10-20220414-en
General
-
Target
18086cc4cebf9eb9eaf8dc5ce9192a7f0a759c412d1b55935bfb0143bd60c55f
-
Size
320KB
-
MD5
32fa3e604f96ea96f001eb295bb238f0
-
SHA1
0de695fb7c66f4daad4c2f34720fd25d365854b4
-
SHA256
18086cc4cebf9eb9eaf8dc5ce9192a7f0a759c412d1b55935bfb0143bd60c55f
-
SHA512
f741403f4b609cb881396a369ae5dd87e468e05330f3e440859194c120903d1ae561271b40fde53649b5407c03bb5d5700bcb97b3e6924cce7688a57be677b16
-
SSDEEP
6144:PLJ5/QsbLWit77MnK39nqY/uVw5EDiGZ4u22Xjs4OY:PjxiUniRY/QLNCJ2Xj3OY
Malware Config
Signatures
Files
-
18086cc4cebf9eb9eaf8dc5ce9192a7f0a759c412d1b55935bfb0143bd60c55f.exe windows x86
b9a2ed932d108cc7d50ddf2075967639
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetModuleFileNameW
CreateEventW
OpenEventW
InterlockedExchange
GetLocaleInfoA
GetLongPathNameA
InterlockedIncrement
_lwrite
WriteConsoleInputW
ReadConsoleInputW
GetSystemDirectoryW
MoveFileExA
ReadConsoleInputA
VerifyVersionInfoW
WaitNamedPipeA
GlobalFree
GetCPInfoExW
BeginUpdateResourceA
EnumCalendarInfoExW
MoveFileW
ReadConsoleOutputCharacterW
GetConsoleAliasesLengthW
LocalAlloc
GetProcAddress
EnumResourceNamesW
RemoveDirectoryW
GetLastError
CommConfigDialogW
SetFileAttributesA
GetCommTimeouts
OpenJobObjectA
LCMapStringW
GetAtomNameW
GetFileAttributesW
SetConsoleTitleW
ReplaceFileA
GetBinaryTypeA
GetShortPathNameA
GetUserDefaultLangID
GetGeoInfoW
GetConsoleAliasW
SetLastError
GetTickCount
GetCurrentProcess
FreeLibrary
GetEnvironmentStrings
SetFileTime
FindResourceExW
SetConsoleMode
GetDiskFreeSpaceA
GetConsoleAliasExesW
WaitForMultipleObjects
SetDefaultCommConfigW
HeapFree
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
RtlUnwind
HeapAlloc
HeapCreate
IsProcessorFeaturePresent
Sleep
HeapSize
GetModuleHandleW
ExitProcess
CloseHandle
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
ReadFile
SetStdHandle
FlushFileBuffers
WriteConsoleW
MultiByteToWideChar
SetEndOfFile
GetProcessHeap
GetStringTypeW
CreateFileW
Sections
.text Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kixi Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nibu Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.juneno Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wuxujup Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ