Static task
static1
Behavioral task
behavioral1
Sample
100d8852de93e54659c2e9da519cab6934f488bf4c959889f978e49c8ba59e37.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
100d8852de93e54659c2e9da519cab6934f488bf4c959889f978e49c8ba59e37.exe
Resource
win10v2004-20220414-en
General
-
Target
100d8852de93e54659c2e9da519cab6934f488bf4c959889f978e49c8ba59e37
-
Size
316KB
-
MD5
5c3ecbbd07a3a9ea27ab0bddb1a6176d
-
SHA1
171a1e5ad3fb212af8e30d73a70338c319b4f346
-
SHA256
100d8852de93e54659c2e9da519cab6934f488bf4c959889f978e49c8ba59e37
-
SHA512
0a09c1313c03249c72f19ffe84cb5c3758b9f1394f82aaac24f969009e21b5647cf9af3b3f35703a27c8496427692a8c715c72ac3bd9f918f7cb6ccf21dc8465
-
SSDEEP
6144:h6FITVuCEX4HuoA/d7d92i2BkdwgOfnM89RY:KIxHEX4W/Vd9FwgUH9R
Malware Config
Signatures
Files
-
100d8852de93e54659c2e9da519cab6934f488bf4c959889f978e49c8ba59e37.exe windows x86
e705f04d0e62069476993d392776bf95
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalAlloc
GlobalMemoryStatus
GetBinaryTypeA
ConvertFiberToThread
GetLastError
DebugActiveProcess
GetHandleInformation
lstrlenW
GetModuleHandleW
QueryDosDeviceW
GetFileAttributesExA
GetNamedPipeHandleStateA
IsProcessInJob
GetNumberFormatA
PeekConsoleInputA
WriteConsoleW
SetFilePointerEx
GetStringTypeW
OutputDebugStringW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
HeapReAlloc
GetCPInfo
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
CloseHandle
SetLastError
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CreateSemaphoreW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FatalAppExitA
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
CreateFileW
user32
GetMonitorInfoA
DlgDirSelectExA
winhttp
WinHttpCloseHandle
WinHttpTimeFromSystemTime
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpCheckPlatform
WinHttpOpen
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 78.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ