basketball
Static task
static1
Behavioral task
behavioral1
Sample
4eac200afdbf3ed368074c0a544bfdbbe0b33f9366905a2b0bd0a51aa1c65477.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4eac200afdbf3ed368074c0a544bfdbbe0b33f9366905a2b0bd0a51aa1c65477.exe
Resource
win10v2004-20220414-en
General
-
Target
4eac200afdbf3ed368074c0a544bfdbbe0b33f9366905a2b0bd0a51aa1c65477
-
Size
296KB
-
MD5
b4f63dbb03d24833d78459410e8fa381
-
SHA1
5cb7fe1ba61b4d313bf3c74800b91adf7e6b7770
-
SHA256
4eac200afdbf3ed368074c0a544bfdbbe0b33f9366905a2b0bd0a51aa1c65477
-
SHA512
55020705a906c239d9e9a90ffec59b47486e569604320e9db9e234a75c62db29ef50db5be03bc83f23f0fe9bb6f8783298b31b3e7b45f42f1e3f392fdf087c99
-
SSDEEP
3072:ZzpApxDjhlmK9KSSWqOXCoK1CchP1Tt56j0GxFJndxm31S9+YODm8Qw16SZCQQfF:5pupT9eZoyfw0Gxv812+dZ6jQQf6oTc
Malware Config
Signatures
Files
-
4eac200afdbf3ed368074c0a544bfdbbe0b33f9366905a2b0bd0a51aa1c65477.exe windows x86
5bd3cab54d954877356d7713f8d67bdf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Imports
kernel32
SetConsoleTitleA
GetStringTypeExA
GetNamedPipeHandleStateW
LCMapStringA
GetLargestConsoleWindowSize
EnumSystemLocalesA
VerifyVersionInfoW
FindFirstFileA
BackupRead
GetTapeStatus
CreateTimerQueueTimer
HeapUnlock
VirtualProtectEx
BuildCommDCBW
IsBadStringPtrA
GetAtomNameA
LoadLibraryA
RegisterWaitForSingleObject
LocalAlloc
CreateHardLinkW
TransmitCommChar
GetTapeParameters
DebugSetProcessKillOnExit
GetProcessShutdownParameters
OpenFileMappingW
GetPrivateProfileSectionA
VirtualProtect
LocalSize
lstrlenW
Beep
GetFileAttributesA
InitAtomTable
GetConsoleWindow
SetFileShortNameW
GlobalAlloc
GetDriveTypeA
GetCommandLineA
GetCurrencyFormatA
FindNextVolumeMountPointA
EnumCalendarInfoExW
GetTickCount
GetUserDefaultLCID
GlobalLock
GetCurrentProcess
LoadLibraryExW
FileTimeToDosDateTime
lstrcmpA
GetProcessVersion
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
IsValidLocale
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
advapi32
CloseEventLog
GetSecurityDescriptorDacl
GetServiceDisplayNameA
SetSecurityDescriptorSacl
GetLengthSid
RegLoadKeyA
AddAccessAllowedAce
SetServiceStatus
RegDeleteValueW
NotifyBootConfigStatus
LookupPrivilegeValueW
NotifyChangeEventLog
EqualSid
RegSetValueExA
RegRestoreKeyA
IsValidAcl
LookupPrivilegeNameW
OpenServiceA
GetCurrentHwProfileA
Exports
Exports
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 610KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.suf Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fedim Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mosam Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gicade Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.necivar Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ