Static task
static1
Behavioral task
behavioral1
Sample
dcebc2afe81190515a12f8e775cce9a65f1ffd75a596236016ae34452cb6b81e.exe
Resource
win7-20220414-en
General
-
Target
dcebc2afe81190515a12f8e775cce9a65f1ffd75a596236016ae34452cb6b81e
-
Size
579KB
-
MD5
a8262d370c97e29bbadafc1bf1e9a8d8
-
SHA1
9e17405cc78961b0a694721214527c6a994240c4
-
SHA256
dcebc2afe81190515a12f8e775cce9a65f1ffd75a596236016ae34452cb6b81e
-
SHA512
7f60ba689d5dbfaa18b831fc40156961a13bb63b4028bafacebf2c05ab44c3630df0fc93f0e33b383355d2b27b36511587e98a5169cf6089830c4b20bb56bd8b
-
SSDEEP
12288:r7hTNLrr0+4J56tH1zM33A2WdwsBK1bCIGbyRY7c7K:rtTNLrYbJYJ1QHAbdxBYCUWg7
Malware Config
Signatures
Files
-
dcebc2afe81190515a12f8e775cce9a65f1ffd75a596236016ae34452cb6b81e.exe windows x86
b9f4ce3c6a5d0f471fe7418d273edd35
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetVolumeLabelA
GetNumaNodeProcessorMask
SetPriorityClass
IsBadStringPtrW
WriteConsoleOutputCharacterW
lstrlenA
GetDefaultCommConfigW
GetProcessIoCounters
ClearCommError
SetConsoleScreenBufferSize
SetThreadExecutionState
FlushViewOfFile
FindFirstFileExW
ConnectNamedPipe
GetTickCount
GetWindowsDirectoryA
WideCharToMultiByte
LoadLibraryW
_hread
SizeofResource
GetWriteWatch
GetEnvironmentVariableA
HeapReAlloc
DisconnectNamedPipe
GetLastError
GetProcAddress
GetLongPathNameA
EnumDateFormatsExA
EnumSystemCodePagesW
GetAtomNameA
SetCalendarInfoW
FindFirstVolumeMountPointW
SetConsoleCtrlHandler
GetExitCodeThread
SetFileApisToANSI
SetProcessWorkingSetSize
GetModuleFileNameA
CreateIoCompletionPort
_lread
GetVolumeNameForVolumeMountPointW
GetCurrentProcessId
FindNextVolumeA
CompareStringW
GetFullPathNameA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
SetFilePointer
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
RaiseException
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
SetStdHandle
FlushFileBuffers
GetModuleHandleA
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
user32
GetCaretPos
advapi32
RegisterEventSourceW
Sections
.text Size: 509KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ