Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
General
-
Target
tmp
-
Size
317KB
-
MD5
30c968a254b1d5b817b33a7b2c8e0298
-
SHA1
92173979722dd96e06328123a6e1d6d71c0f6dee
-
SHA256
89fa3b0f03b9987da574b9f8c70f0086fce2a3029a707f5ee9712eeaca05b2d2
-
SHA512
63c5718ccb677ca8c22557069ed71d95b6fd9a13e0bf0fb9bcb296c47693c83b0d74cbd544c026b6b75bb036d8ab299c779dbb95cb2a0e36cd56248b67fdd464
-
SSDEEP
6144:kyB7Pq/R8dJMDphMtXiajgz0/GdvI2zXc0Crz:M/udJ2phI2z0/8F7C/
Malware Config
Signatures
Files
-
tmp.exe windows x86
8ecc82a073398bf14d8558eb75c220bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
OpenEventA
GetLocaleInfoA
GetLongPathNameA
_lwrite
WriteConsoleInputA
GetSystemDirectoryW
MoveFileExW
CreateEventA
VerifyVersionInfoA
InterlockedExchange
ReadConsoleInputA
WaitNamedPipeA
GlobalFree
GetCPInfoExW
BeginUpdateResourceA
FreeLibraryAndExitThread
EnumCalendarInfoExA
MoveFileA
ReadConsoleOutputCharacterW
GetConsoleAliasesLengthW
GlobalAlloc
GetProcAddress
GetCalendarInfoA
CommConfigDialogA
SetFileAttributesA
AreFileApisANSI
OpenJobObjectA
LCMapStringW
GetFileAttributesW
SetConsoleTitleA
ReplaceFileA
GetCurrentProcessId
GetLastError
GetSystemDefaultLangID
SetLastError
GetEnvironmentStringsW
GetFileTime
FindResourceExW
GetConsoleMode
GetDiskFreeSpaceA
GetConsoleAliasExesW
WaitForSingleObject
SetDefaultCommConfigW
LoadLibraryA
HeapSize
SetFilePointer
GetConsoleAliasExesLengthW
LoadLibraryW
WriteConsoleW
HeapReAlloc
MultiByteToWideChar
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
GetCurrentThreadId
HeapAlloc
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeW
Sleep
SetStdHandle
GetConsoleCP
FlushFileBuffers
RaiseException
CreateFileW
user32
ClientToScreen
gdi32
GetTextExtentPoint32A
winhttp
WinHttpCloseHandle
Sections
.text Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jovice Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bojixag Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sosero Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.piyanot Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dob Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ