Static task
static1
Behavioral task
behavioral1
Sample
091e5232b917a09910ef7fadc864bf2b.exe
Resource
win7-20220414-en
General
-
Target
091e5232b917a09910ef7fadc864bf2b
-
Size
422KB
-
MD5
091e5232b917a09910ef7fadc864bf2b
-
SHA1
c4daa3d7b3d5b5f29c7828f2500c40309718bad2
-
SHA256
5031ef16176b528d27581a3ceb8b3c188a3907beee86108ccd445bbffbe44ed4
-
SHA512
446e384b74e29306a41f051d38aa0dc2d1628957adad09533707d768ff6d4c0059d503617d80ade022fac91d1b09ebc8332b575ebfb63c0932fed89490eaa112
-
SSDEEP
6144:67NgyjyXQBtmDxFM+zziGsoZODH7D0cOnaMWrDMiOiz:6BByXvqGWyn/I
Malware Config
Signatures
Files
-
091e5232b917a09910ef7fadc864bf2b.exe windows x86
da02586c62eb6e81c7645aee3bf28479
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
GetModuleFileNameA
InterlockedDecrement
EnumCalendarInfoExA
InterlockedIncrement
WriteConsoleInputA
ReadConsoleInputW
GetSystemDirectoryW
WriteConsoleW
WaitNamedPipeW
BuildCommDCBW
BeginUpdateResourceA
CancelTimerQueueTimer
GetCPInfoExW
GetModuleFileNameW
GetConsoleAliasExesLengthW
EnumTimeFormatsW
LoadLibraryA
CopyFileA
ReadConsoleOutputCharacterW
GetConsoleAliasesLengthA
GlobalAlloc
GetUserDefaultLCID
CancelWaitableTimer
GetSystemWindowsDirectoryA
SizeofResource
WaitForMultipleObjects
lstrlenW
EnumResourceNamesA
GlobalReAlloc
SetFileAttributesA
AreFileApisANSI
GetConsoleAliasesLengthW
GetAtomNameW
GetFileAttributesA
SetConsoleTitleA
CreateHardLinkA
GetProcessWorkingSetSize
GetLongPathNameW
GetLastError
GetSystemDefaultLangID
GetConsoleProcessList
BuildCommDCBAndTimeoutsA
OpenJobObjectA
AddRefActCtx
FindResourceExW
GetConsoleMode
GetDiskFreeSpaceA
GetConsoleAliasExesA
InitializeCriticalSection
GetConsoleOutputCP
GetCPInfoExA
CloseHandle
CreateFileW
GetProcAddress
LoadLibraryW
HeapReAlloc
HeapFree
HeapAlloc
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
SetStdHandle
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetConsoleCP
FlushFileBuffers
user32
ClientToScreen
advapi32
AreAnyAccessesGranted
winhttp
WinHttpCloseHandle
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 190KB - Virtual size: 40.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.veya Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ