Static task
static1
Behavioral task
behavioral1
Sample
294ddc03e1e1372defb5b67fe50aa815e52772931ba9e9a1027437e0b7bb8242.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
294ddc03e1e1372defb5b67fe50aa815e52772931ba9e9a1027437e0b7bb8242.exe
Resource
win10v2004-20220414-en
General
-
Target
294ddc03e1e1372defb5b67fe50aa815e52772931ba9e9a1027437e0b7bb8242
-
Size
317KB
-
MD5
991538973511d559ddded2b5af29a79a
-
SHA1
0911fb1e0bcce1f8b3d4bc229028629a7d8b513e
-
SHA256
294ddc03e1e1372defb5b67fe50aa815e52772931ba9e9a1027437e0b7bb8242
-
SHA512
1a20717ce3ede8b4aa6f4f409aa11e67ff943fe133a7087f5d30b153d5273daa5f3a223350ad29b28db1ac170140c41d0019d14bde88c9c970dee591356f0c6d
-
SSDEEP
6144:en1lAQNurZCvgdK4FySIbahpCAgza3vAog985urB/uh:e1lAQN0UQK4FPI2hEZ+vAogW8/W
Malware Config
Signatures
Files
-
294ddc03e1e1372defb5b67fe50aa815e52772931ba9e9a1027437e0b7bb8242.exe windows x86
39ec51e540f3e7ac6f7d50577e019fde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessIoCounters
GetProcessWorkingSetSize
SetProcessWorkingSetSize
GetCurrentProcess
GetCurrentProcessId
ExitProcess
FatalExit
GetThreadPriority
TerminateThread
GetProcessTimes
GetTickCount
LoadLibraryA
GetProcessShutdownParameters
DecodePointer
EncodePointer
WriteConsoleW
SetFilePointerEx
ReadConsoleW
LocalAlloc
GetProcessAffinityMask
GetSystemTimes
GetProcAddress
ReadFile
SetEndOfFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
CreateFileW
SetConsoleCtrlHandler
GetProcessHeap
GetStringTypeW
GetFileType
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThread
OutputDebugStringA
OutputDebugStringW
CloseHandle
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
RaiseException
user32
SetScrollRange
ShowScrollBar
GetPropW
GetScrollRange
gdi32
StretchBlt
advapi32
OpenEventLogA
msimg32
TransparentBlt
GradientFill
winhttp
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpWriteData
WinHttpReadData
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ