Linear
Static task
static1
Behavioral task
behavioral1
Sample
1b90aeb29cf4680a4bd3eccca4d5c4bd310b98dcdde256dca2a560ad24abbdb1.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1b90aeb29cf4680a4bd3eccca4d5c4bd310b98dcdde256dca2a560ad24abbdb1.exe
Resource
win10v2004-20220414-en
General
-
Target
1b90aeb29cf4680a4bd3eccca4d5c4bd310b98dcdde256dca2a560ad24abbdb1
-
Size
4.4MB
-
MD5
5ae79839e2560d77845977fb81eb277c
-
SHA1
e7671e0b54804d059369e1be3364d9b3a54a29d6
-
SHA256
1b90aeb29cf4680a4bd3eccca4d5c4bd310b98dcdde256dca2a560ad24abbdb1
-
SHA512
94276ab4f4f85c064d483ca234062cd569fb0b1e4e11689e7046bb92e54e2a43c401c5fcecaceecb68c1363ae786fec29fb46f2d52d8afaf51aa8c4a16d6c27a
-
SSDEEP
98304:lr4rr9tMdArmyj/fCol4yxjZJxQaZ9fyjc:J4rHMdm/fCol4yxdJx59Kjc
Malware Config
Signatures
Files
-
1b90aeb29cf4680a4bd3eccca4d5c4bd310b98dcdde256dca2a560ad24abbdb1.exe windows x86
432fa5211ef0f96934979b9062f09f53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
LoadLibraryExW
InterlockedIncrement
GetConsoleAliasA
GetModuleHandleExW
GetTimeFormatA
ConnectNamedPipe
GetTickCount
TzSpecificLocalTimeToSystemTime
GlobalAlloc
TerminateThread
GetLocaleInfoW
GetSystemTimeAdjustment
GetFileAttributesA
SetConsoleCursorPosition
FindResourceW
SetTimeZoneInformation
GetAtomNameW
lstrcatA
RaiseException
GetLastError
GetProcAddress
OpenWaitableTimerA
SetConsoleOutputCP
FindAtomA
GlobalFindAtomW
GetModuleHandleA
GetFileTime
FileTimeToLocalFileTime
GetCurrentProcessId
GetFileAttributesW
MapViewOfFile
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
advapi32
RegCreateKeyW
Exports
Exports
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tizete Size: 512B - Virtual size: 377B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.new Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ