Static task
static1
Behavioral task
behavioral1
Sample
e8dffb2b7edf8c4049e00c21917860d191edcd0b2829d409b4ddf47902161742.exe
Resource
win10-20220414-en
General
-
Target
e8dffb2b7edf8c4049e00c21917860d191edcd0b2829d409b4ddf47902161742
-
Size
286KB
-
MD5
9ba4abda48c03ccae1c377a750e4275b
-
SHA1
e401e75fd992011f91a8c0cd4bf005b5c5c2b6ca
-
SHA256
e8dffb2b7edf8c4049e00c21917860d191edcd0b2829d409b4ddf47902161742
-
SHA512
778440b762897e0c9ba50d514fc4f448078acde559de41ddb232855da4ad2ad2b19541a8e976e6947991808282649c02114f6df0a2217abf4fa35ec0ca293423
-
SSDEEP
6144:AShm+6J6N9wkH3Z6hL9OWjBKMLucGrmLi4434NWw8kTwQ2:no+62W6Z6lgWjBKD3rmLEg
Malware Config
Signatures
Files
-
e8dffb2b7edf8c4049e00c21917860d191edcd0b2829d409b4ddf47902161742.exe windows x86
ec3bfeb025110fb411f85a2a0456d05d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugSetProcessKillOnExit
FindNextChangeNotification
GetNamedPipeHandleStateW
CreateIoCompletionPort
FillConsoleOutputCharacterA
EnumSystemCodePagesW
TerminateProcess
GetProcessId
VerifyVersionInfoA
EnumDateFormatsA
FindNextFileA
CopyFileExA
BuildCommDCBAndTimeoutsW
VirtualUnlock
WriteProfileStringW
VerifyVersionInfoW
GetDriveTypeA
GetFileType
DeleteFileW
FindNextVolumeMountPointW
OutputDebugStringA
ResetWriteWatch
WriteConsoleInputW
GetConsoleTitleA
GetComputerNameExW
SetTimeZoneInformation
CallNamedPipeA
LoadLibraryA
GetSystemDirectoryA
GetDriveTypeW
BuildCommDCBAndTimeoutsA
ActivateActCtx
GetProfileSectionW
GetCommandLineW
AddRefActCtx
FindResourceW
FormatMessageA
GetModuleFileNameW
CreateJobObjectA
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
GetDllDirectoryW
TerminateThread
CreateNamedPipeW
WritePrivateProfileStringW
GetConsoleAliasesLengthA
WriteProfileSectionW
AddAtomA
InterlockedDecrement
GetVersionExW
HeapSize
_hwrite
GetStartupInfoA
ConnectNamedPipe
GetCPInfoExW
GetSystemWow64DirectoryW
GetPrivateProfileIntA
GetConsoleAliasExesA
DebugBreak
EndUpdateResourceW
InterlockedExchangeAdd
SetLastError
GetStringTypeExA
DeleteVolumeMountPointW
SetDefaultCommConfigW
lstrcpyA
GetOEMCP
_lwrite
GetNamedPipeHandleStateA
GetDiskFreeSpaceExW
CreateJobSet
WriteConsoleA
VirtualProtect
ReadConsoleOutputA
SetThreadContext
BuildCommDCBW
ReleaseActCtx
FoldStringA
GetHandleInformation
WritePrivateProfileSectionA
DeleteCriticalSection
GetFileAttributesA
OpenWaitableTimerW
SetConsoleMode
HeapSetInformation
SetComputerNameA
SetEvent
UnlockFile
GetProcAddress
ChangeTimerQueueTimer
CopyFileW
MoveFileA
GlobalAlloc
GetCommMask
SetFileShortNameW
GetFileAttributesW
FreeEnvironmentStringsW
GetProfileStringA
SetComputerNameW
GetConsoleAliasesW
ReadConsoleInputW
CreateMailslotA
EnumDateFormatsW
GetTimeZoneInformation
SetConsoleOutputCP
GetFileInformationByHandle
SetLocalTime
FoldStringW
CallNamedPipeW
GetCurrentActCtx
CopyFileExW
OpenSemaphoreW
GetModuleHandleExA
LoadLibraryW
GetConsoleAliasExesLengthW
GetTickCount
LocalFlags
FindFirstVolumeW
CancelDeviceWakeupRequest
SetFileTime
GetQueuedCompletionStatus
lstrcatW
OpenWaitableTimerA
EnumResourceNamesW
OpenFileMappingW
UnregisterWait
UnhandledExceptionFilter
GetCompressedFileSizeW
GetThreadPriority
ReadConsoleW
AssignProcessToJobObject
InterlockedIncrement
Sleep
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
WideCharToMultiByte
GetCommandLineA
HeapValidate
IsBadReadPtr
GetModuleHandleA
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetStdHandle
WriteFile
WriteConsoleW
OutputDebugStringW
ExitProcess
GetACP
GetCPInfo
IsValidCodePage
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
GetConsoleOutputCP
SetFilePointer
CloseHandle
CreateFileA
DeleteFileA
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xava Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gox Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ