Static task
static1
Behavioral task
behavioral1
Sample
fd0fadecf054fd384b0964b72331387a79d621a90383706838713f086d12ee74.exe
Resource
win10v2004-20220414-en
General
-
Target
fd0fadecf054fd384b0964b72331387a79d621a90383706838713f086d12ee74
-
Size
279KB
-
MD5
e8a3b9038499e57efa0fac179995c4eb
-
SHA1
4584bea5ef3c4d6dd4de7bc1162ab5a3000cf6d1
-
SHA256
fd0fadecf054fd384b0964b72331387a79d621a90383706838713f086d12ee74
-
SHA512
063874174ab32f003a26bdf2ee7651e7ff08eeac21bcc8f122a25b840f8901fbcf6ed8289f321e817bc507a86cc54b9c8e715ccc00de12735022723175d28b13
-
SSDEEP
6144:gUw3Alus1pkif0OglNw1XVRxMuIKg9ZCp0/4RMeUoIWJj:gUwAlpd0OgX8XVRu6YZCp0MMeUoIE
Malware Config
Signatures
Files
-
fd0fadecf054fd384b0964b72331387a79d621a90383706838713f086d12ee74.exe windows x86
e3197bd2e8d6d96873982b03f5c6089a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasExesLengthW
FindNextChangeNotification
GetNamedPipeHandleStateW
CreateIoCompletionPort
FillConsoleOutputCharacterA
EnumSystemCodePagesW
TerminateProcess
GetProcessId
VerifyVersionInfoA
EnumDateFormatsA
FindNextFileA
CopyFileExA
BuildCommDCBAndTimeoutsW
VirtualUnlock
WriteProfileStringW
VerifyVersionInfoW
GetDriveTypeA
GetFileType
DeleteFileW
FindNextVolumeMountPointW
OutputDebugStringA
ResetWriteWatch
WriteConsoleInputW
GetConsoleTitleA
GetComputerNameExW
SetTimeZoneInformation
CallNamedPipeA
LoadLibraryA
GetSystemDirectoryA
GetDriveTypeW
BuildCommDCBAndTimeoutsA
ActivateActCtx
GetProfileSectionW
GetCommandLineW
InterlockedIncrement
AddRefActCtx
FindResourceW
FormatMessageA
GetModuleFileNameW
CreateJobObjectA
InitializeCriticalSection
SetFirmwareEnvironmentVariableW
FindNextVolumeA
TerminateThread
CreateNamedPipeW
WritePrivateProfileStringW
GetConsoleAliasesLengthA
WriteProfileSectionW
AddAtomA
InterlockedDecrement
GetVersionExW
HeapSize
_hwrite
GetStartupInfoA
ConnectNamedPipe
GetCPInfoExW
GetSystemWow64DirectoryW
GetLastError
GetPrivateProfileIntA
GetConsoleAliasExesA
DebugBreak
EndUpdateResourceW
SetLastError
InterlockedExchangeAdd
GetStringTypeExA
DeleteVolumeMountPointW
GetModuleHandleA
SetDefaultCommConfigW
lstrcpyA
GetSystemWindowsDirectoryA
GetOEMCP
_lwrite
GetNamedPipeHandleStateA
GetDiskFreeSpaceExW
CreateJobSet
WriteConsoleA
VirtualProtect
ReadConsoleOutputA
SetThreadContext
BuildCommDCBW
ReleaseActCtx
FoldStringA
GetHandleInformation
WritePrivateProfileSectionA
DeleteCriticalSection
GetFileAttributesA
OpenWaitableTimerW
CopyFileW
GlobalMemoryStatus
SetComputerNameA
ResetEvent
UnlockFile
GetProcAddress
GetOverlappedResult
ChangeTimerQueueTimer
MoveFileA
GlobalAlloc
GetCommMask
SetFileShortNameW
GetFileAttributesW
FreeEnvironmentStringsA
GetProfileStringA
SetComputerNameW
GetConsoleAliasesW
ReadConsoleInputW
CreateMailslotW
EnumDateFormatsW
GetTimeZoneInformation
SetConsoleOutputCP
GetStdHandle
SetLocalTime
FoldStringW
CallNamedPipeW
GetCurrentActCtx
CopyFileExW
OpenSemaphoreW
GetModuleHandleExA
LoadLibraryW
LocalFlags
FindFirstVolumeW
CancelDeviceWakeupRequest
SetFileTime
GetQueuedCompletionStatus
lstrcatW
OpenWaitableTimerA
EnumResourceNamesW
OpenFileMappingW
GetFileSize
UnregisterWait
UnhandledExceptionFilter
GetCompressedFileSizeW
ReadConsoleW
FreeUserPhysicalPages
WriteConsoleOutputCharacterW
AssignProcessToJobObject
GetTickCount
Sleep
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetCommandLineA
HeapValidate
IsBadReadPtr
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
WriteFile
WriteConsoleW
OutputDebugStringW
ExitProcess
GetACP
GetCPInfo
IsValidCodePage
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
GetConsoleOutputCP
SetFilePointer
CloseHandle
CreateFileA
DeleteFileA
Sections
.text Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dedud Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zamu Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ