Static task
static1
Behavioral task
behavioral1
Sample
34745abeba30e12a9dee88bcb7c3c9b119f8c21451a2d8ab2aec298c76b35616.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
34745abeba30e12a9dee88bcb7c3c9b119f8c21451a2d8ab2aec298c76b35616.exe
Resource
win10v2004-20220414-en
General
-
Target
34745abeba30e12a9dee88bcb7c3c9b119f8c21451a2d8ab2aec298c76b35616
-
Size
717KB
-
MD5
690f4210136edf1fdffc5df710f49fc5
-
SHA1
2dc9707fab0c03ee122665c791717461b84c0edf
-
SHA256
34745abeba30e12a9dee88bcb7c3c9b119f8c21451a2d8ab2aec298c76b35616
-
SHA512
bfe9a8d68d710e63ad7249c49b4e24bba64d3b8be1e615cd3e5fdbf3ea2a36e7eb92028bb50746ba69507b8d333d39efbbc648f754f83fa919df2a6fcad6866c
-
SSDEEP
12288:AHA57OXFeTH9QRBbaLaPwJUmjK+6Rc4KbZbCLCoS1pf9jZpo8NAJlyZsYoFwfxZ:TtsFeTH9YBdqUFRcLVbCOoQ1TtAhtu
Malware Config
Signatures
Files
-
34745abeba30e12a9dee88bcb7c3c9b119f8c21451a2d8ab2aec298c76b35616.exe windows x86
4d0dcad216ce5fc97aeebd179e0f24c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetConsoleTitleA
GetWindowsDirectoryA
SetFileShortNameW
FreeConsole
GetFileAttributesA
lstrcpynW
WriteConsoleW
GetACP
GetProcAddress
GetTapeStatus
GetProcessHeaps
ReadFileEx
VerLanguageNameW
SetEvent
BuildCommDCBAndTimeoutsW
LockResource
GetCommMask
WaitForMultipleObjects
GetModuleHandleA
GetStringTypeW
DeleteFileW
GetPrivateProfileSectionW
FindActCtxSectionStringW
GlobalReAlloc
LCMapStringW
lstrcpyA
SetHandleInformation
SetDefaultCommConfigW
WaitNamedPipeA
lstrlenA
DeleteTimerQueueEx
CreateMutexW
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
IsProcessorFeaturePresent
Sleep
HeapSize
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
LoadLibraryW
CloseHandle
CreateFileA
SetStdHandle
MultiByteToWideChar
FlushFileBuffers
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileW
user32
GetCaretPos
advapi32
AdjustTokenPrivileges
AreAnyAccessesGranted
BackupEventLogA
RegQueryInfoKeyA
DeregisterEventSource
RegQueryValueExW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 593KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 74.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ