Static task
static1
Behavioral task
behavioral1
Sample
34ad8276994a33159a930e071d3b8c6d.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
34ad8276994a33159a930e071d3b8c6d.exe
Resource
win10v2004-20220414-en
General
-
Target
34ad8276994a33159a930e071d3b8c6d
-
Size
218KB
-
MD5
34ad8276994a33159a930e071d3b8c6d
-
SHA1
f800ecc2df2b2c9a77c5c316685d5521b856c14b
-
SHA256
29c05aa1ff99bec33ca06115404a2dbe2d6123ea16080e675a6cdf03838f71b3
-
SHA512
314120bf415df4a64aadd59ca00b08c25f957af4ef1d68893859863dbfc05e0f44697113fcfe7f52a7a149da728a260f16601f29bfbf6d2becc2f3a8dc8a80e5
-
SSDEEP
3072:S/+93y/VNLJQlNRyR0CJidldrvLPN8R5X0gJ12boZ6RjpTSltu9ddBqR6Oo:XVYbLWlyRuLC0kN691SltK
Malware Config
Signatures
Files
-
34ad8276994a33159a930e071d3b8c6d.exe windows x86
21c4fc2242bb8db10e05b06b62f3ca9e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringW
IsBadReadPtr
FatalAppExitA
_lread
GetComputerNameW
GetConsoleTitleA
GetModuleHandleExW
VirtualProtect
VirtualProtectEx
GlobalAlloc
MapViewOfFile
GetCPInfoExW
FindResourceExW
_llseek
GetSystemTime
FindNextVolumeA
ReadConsoleInputW
lstrlenW
lstrlenA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeEnvironmentStringsW
SetStdHandle
SetThreadExecutionState
ReadFileEx
GetSystemTimeAsFileTime
GlobalMemoryStatus
ReadConsoleA
CompareStringW
CompareStringA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
GetLocaleInfoW
CreateFileA
CloseHandle
FlushFileBuffers
GetTimeZoneInformation
SetEnvironmentVariableA
advapi32
AddAccessAllowedObjectAce
PrivilegedServiceAuditAlarmA
OpenEventLogW
EnumServicesStatusW
SetFileSecurityA
AddAuditAccessObjectAce
RegSetKeySecurity
RegEnumKeyExW
msimg32
AlphaBlend
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 111.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ