Static task
static1
Behavioral task
behavioral1
Sample
80d73f1bad2556979c5c9759800ed243.exe
Resource
win7-20220414-en
General
-
Target
80d73f1bad2556979c5c9759800ed243
-
Size
413KB
-
MD5
80d73f1bad2556979c5c9759800ed243
-
SHA1
31089ba600b03d8592c99e6bdbd15585abdd8e1c
-
SHA256
5d1e2200925af86836f79400e3cb449428ee40d9a053d01d4d88edccfcc76c68
-
SHA512
e2f3c8c5043bf937ed4e15a69df4e153c1dd5bd874a8c7e072c85232ef09435a3db14f408a15b77b034109dcd863d06c86650a5f43b82341f0875e2557d4e38b
-
SSDEEP
12288:CVcXAZvE9D1SAvCjHb5Z22D9DWtTGQC8Ls:GvEN1jag2D9DWtT35
Malware Config
Signatures
Files
-
80d73f1bad2556979c5c9759800ed243.exe windows x86
37130e0bb32591aaaaeb578f4dec9090
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugBreakProcess
FindFirstChangeNotificationA
GetNamedPipeHandleStateW
CreateIoCompletionPort
FillConsoleOutputCharacterW
DisableThreadLibraryCalls
TerminateProcess
GetProcessId
VerifyVersionInfoW
EnumDateFormatsW
FindNextFileW
CopyFileExA
BuildCommDCBAndTimeoutsW
VirtualUnlock
WriteProfileStringW
VerifyVersionInfoA
SetProcessPriorityBoost
FindFirstChangeNotificationW
GetFileType
DeleteFileA
FindNextVolumeMountPointA
OutputDebugStringA
ResetWriteWatch
WriteConsoleInputA
WriteConsoleInputW
GetConsoleTitleW
SetComputerNameExW
GetTimeZoneInformation
LoadLibraryA
GetSystemDirectoryA
GetDriveTypeW
BuildCommDCBAndTimeoutsA
GetShortPathNameW
ActivateActCtx
GetProfileSectionA
DeleteFileW
GetCommandLineW
InterlockedIncrement
InterlockedExchangeAdd
AddRefActCtx
FindResourceA
FormatMessageA
GetModuleFileNameW
CreateJobObjectW
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
GetDllDirectoryA
GetExitCodeThread
WritePrivateProfileStringW
GetConsoleAliasesLengthW
WriteProfileSectionW
AddAtomA
UpdateResourceW
InterlockedDecrement
GetVersionExA
HeapSize
_hwrite
InterlockedExchange
GetStartupInfoW
DisconnectNamedPipe
GetCPInfoExW
GetSystemWow64DirectoryW
SetLastError
GetPrivateProfileIntA
GetConsoleAliasExesW
DebugBreak
EndUpdateResourceW
GetLastError
GetStringTypeW
DeleteVolumeMountPointA
OpenFileMappingA
SetDefaultCommConfigW
VirtualAlloc
lstrcpyA
TerminateThread
GetACP
lstrcatA
GetConsoleAliasA
_lwrite
GetQueuedCompletionStatus
GetNamedPipeHandleStateA
GetDiskFreeSpaceExW
RemoveVectoredExceptionHandler
WriteConsoleW
VirtualProtect
ReadConsoleOutputA
SetThreadContext
BuildCommDCBA
ReleaseActCtx
GetHandleInformation
GetComputerNameW
WritePrivateProfileSectionW
TryEnterCriticalSection
GetPrivateProfileSectionNamesW
OpenWaitableTimerW
CopyFileW
GetVolumePathNameA
SetConsoleMode
HeapSetInformation
SetComputerNameA
FindNextFileA
SetEvent
UnlockFileEx
GetProcAddress
DeleteTimerQueueTimer
MoveFileA
GlobalAlloc
SetCommMask
SetFileShortNameA
FreeEnvironmentStringsW
GetSystemWindowsDirectoryA
GetProfileStringA
GetConsoleTitleA
GlobalGetAtomNameA
SetComputerNameW
GetConsoleAliasesA
CreateMailslotA
EnumDateFormatsA
GetConsoleOutputCP
MoveFileWithProgressW
GetFileInformationByHandle
SetLocalTime
FoldStringW
CallNamedPipeA
GetConsoleAliasExesLengthW
GetCurrentActCtx
OpenSemaphoreW
GetModuleHandleExA
LoadLibraryW
WriteConsoleOutputCharacterW
GetFileAttributesA
GetTickCount
GetConsoleAliasesLengthA
LocalUnlock
GetFileTime
EnumResourceNamesW
OpenFileMappingW
UnhandledExceptionFilter
GetCompressedFileSizeW
GetThreadPriority
ReadConsoleA
AssignProcessToJobObject
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
WideCharToMultiByte
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleA
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetOEMCP
GetCPInfo
IsValidCodePage
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
FlushFileBuffers
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
LCMapStringA
LCMapStringW
WriteConsoleA
SetFilePointer
CreateFileA
CloseHandle
user32
CharUpperA
winhttp
WinHttpWriteData
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bucaben Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gahiz Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ