Static task
static1
Behavioral task
behavioral1
Sample
23d879005835999bd3c38410232c0997317bf221df5491989ec3a5463222c1f8.exe
Resource
win7-20220414-en
General
-
Target
23d879005835999bd3c38410232c0997317bf221df5491989ec3a5463222c1f8
-
Size
461KB
-
MD5
f38a6cdf89d7e22c8d5cd10f96bb578b
-
SHA1
4a7b9eabab7a078d16633e9ebd4371a8bf8ad111
-
SHA256
23d879005835999bd3c38410232c0997317bf221df5491989ec3a5463222c1f8
-
SHA512
312d321db5b923f5b0388f2ee53dd18b7d268fd2831578b5d0a3e99a8761eebeb14c28a92743ae5e05ef2570e3d39e03b0991f7d4df7ccc165fae591b0a5db9f
-
SSDEEP
6144:ZLOwAnNKvWzOXTShk22e7am9p2HxQQsowXkLlD1YiDkoxBTj1iLBQ:swAnglXuLPz9p2He+skD1xoo7wL
Malware Config
Signatures
Files
-
23d879005835999bd3c38410232c0997317bf221df5491989ec3a5463222c1f8.exe windows x86
f8be865180e97183f98620dc1623cca4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
GetCurrentActCtx
GetEnvironmentStringsW
SetHandleInformation
GetWindowsDirectoryA
FindActCtxSectionStringA
SetConsoleCP
GetFileAttributesA
lstrcpynW
IsProcessorFeaturePresent
VerifyVersionInfoA
WriteConsoleW
ReadFile
GetACP
GetProcAddress
GetProcessHeaps
VerLanguageNameA
BuildCommDCBAndTimeoutsW
LockResource
GetCommMask
WaitForMultipleObjects
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileSectionA
RequestDeviceWakeup
GetStringTypeW
GetConsoleTitleW
DeleteCriticalSection
SetFileShortNameA
QueryDepthSList
DeleteFileW
GlobalReAlloc
WriteProcessMemory
LCMapStringW
lstrcpyA
WriteTapemark
lstrlenA
DeleteTimerQueueEx
CreateMutexW
SetDefaultCommConfigA
ReadFileEx
GetLastError
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
CloseHandle
CreateFileA
HeapSize
LoadLibraryW
SetStdHandle
MultiByteToWideChar
FlushFileBuffers
SetEndOfFile
GetProcessHeap
CreateFileW
user32
GetCaretPos
advapi32
BackupEventLogA
CloseEventLog
RegQueryInfoKeyA
AdjustTokenGroups
RegQueryValueExW
MapGenericMask
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 74.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ