Static task
static1
Behavioral task
behavioral1
Sample
295f2e7a08269def791aa11bfafa9d73e36ac9fa6dd292f2b62b1bcf8758aa11.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
295f2e7a08269def791aa11bfafa9d73e36ac9fa6dd292f2b62b1bcf8758aa11.exe
Resource
win10v2004-20220414-en
General
-
Target
295f2e7a08269def791aa11bfafa9d73e36ac9fa6dd292f2b62b1bcf8758aa11
-
Size
342KB
-
MD5
9b2b3970effdd49a3194b83a272b29bd
-
SHA1
9c141b488d126a2e7f25b541d14307acec0e6262
-
SHA256
295f2e7a08269def791aa11bfafa9d73e36ac9fa6dd292f2b62b1bcf8758aa11
-
SHA512
005dc7ff7bedbb07add0f048690dae179f17421e20ec9f3f63c5f54c65966752a9e46dc062ecbdbcbca7dd92591ac70822eb21c595ef453752ef878cf15a8d7c
-
SSDEEP
6144:xSTmGUbRwzc1IpG9yCOmMoqJWjbNg4xLSvnx76Hce7vsqpKht16HMqqx:xSYbyzc1IpGyC16+Ng43ce7EUKht16sD
Malware Config
Signatures
Files
-
295f2e7a08269def791aa11bfafa9d73e36ac9fa6dd292f2b62b1bcf8758aa11.exe windows x86
64824d75e46ca11be26997322ee1717a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
FindResourceA
GetNativeSystemInfo
GetProfileIntW
WriteConsoleOutputCharacterA
ReadConsoleA
GetProfileStringW
WaitForSingleObject
MoveFileWithProgressA
GetTickCount
WaitNamedPipeW
EnumTimeFormatsW
GetPriorityClass
GetSystemDirectoryW
FormatMessageW
GetStringTypeExW
WritePrivateProfileStructW
IsProcessorFeaturePresent
VerifyVersionInfoA
WritePrivateProfileStringW
ReplaceFileA
FillConsoleOutputCharacterW
GetLongPathNameW
HeapUnlock
GetFirmwareEnvironmentVariableW
DefineDosDeviceA
LocalAlloc
MoveFileA
OpenEventA
DeviceIoControl
GetTapeParameters
FoldStringW
WaitForMultipleObjects
GetVolumePathNamesForVolumeNameA
GetDefaultCommConfigA
FindFirstVolumeMountPointA
WriteProfileStringA
GetModuleHandleA
SetLocaleInfoW
CreateMailslotA
VirtualProtect
EnumSystemLocalesW
ExpandEnvironmentStringsW
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
HeapSize
HeapFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
GetStdHandle
WriteFile
GetModuleFileNameW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
OutputDebugStringW
GetStringTypeW
CloseHandle
user32
GetScrollBarInfo
SwitchDesktop
GetMenuBarInfo
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ