Static task
static1
Behavioral task
behavioral1
Sample
d49b935c0111e2a4bfb079159c7bfa9ce1444aa6aff65fe2ba01601060707ad9.exe
Resource
win10v2004-20220414-en
General
-
Target
d49b935c0111e2a4bfb079159c7bfa9ce1444aa6aff65fe2ba01601060707ad9
-
Size
251KB
-
MD5
fd2077eeebc5c2187791ce8a89c7ed0b
-
SHA1
2fb1a3902a00ce29a1693c1ca460e78c8739c33f
-
SHA256
d49b935c0111e2a4bfb079159c7bfa9ce1444aa6aff65fe2ba01601060707ad9
-
SHA512
09895a250972f2ff3edde210a301e221e2705bd241012b2ad1e0e395e4935f2ef280b60c325b28080920738d2314a8ae5a873bbf7377736e770d1e44a3b844ed
-
SSDEEP
6144:6e7/z5FHV8Q/x7PWbMPC1r+zgi9JtNGlYLHB7gi:6e7bbHV8SvC1r+zWYLHB7gi
Malware Config
Signatures
Files
-
d49b935c0111e2a4bfb079159c7bfa9ce1444aa6aff65fe2ba01601060707ad9.exe windows x86
accfac93c9c84ac40058b65e9a0a5ac5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEnclave
LocalLock
CompareFileTime
VirtualFree
GetCurrentProcess
SetConsoleScreenBufferSize
UnregisterWait
VirtualAlloc
GetConsoleAliasA
DeleteFiber
GetSystemTimes
GetConsoleCP
SetConsoleWindowInfo
GetProcessVersion
OpenFileById
lstrlenA
GetVolumeInformationA
WaitForSingleObject
GetTimeFormatA
GetPrivateProfileSectionA
GetCurrentDirectoryA
SwitchToFiber
Sleep
GetFileInformationByHandle
GetTempPathA
GetNumberFormatA
GetLastError
UpdateProcThreadAttribute
SetVolumeMountPointA
SetFileInformationByHandle
CreateFileA
GetCurrentThread
GetProfileIntA
LoadLibraryA
GetVersionExA
GetDateFormatA
CloseHandle
AddConsoleAliasA
SetThreadpoolTimer
GetLocalTime
GetFileSize
SetConsoleCP
GetCurrentProcessId
GetDiskFreeSpaceExA
CreateDirectoryA
GetTempFileNameA
SetConsoleCursorPosition
WriteConsoleInputA
GetCurrencyFormatA
CreateFiber
CreateTimerQueue
FlushFileBuffers
WriteConsoleW
CreateFileW
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
SetFilePointerEx
GetFileSizeEx
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetFileType
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
GetConsoleOutputCP
GetConsoleMode
DecodePointer
user32
ReleaseDC
GetAsyncKeyState
DrawCaption
shell32
SHGetKnownFolderPath
SHGetFolderPathA
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ