MyFunc31
Static task
static1
Behavioral task
behavioral1
Sample
43357749243d4d21c79746a724f75a65446245f3a60130c171bdcd2d98db5e08.exe
Resource
win7-20220414-en
General
-
Target
43357749243d4d21c79746a724f75a65446245f3a60130c171bdcd2d98db5e08
-
Size
645KB
-
MD5
e9c02b69805d5899a65bf73fccdc87ed
-
SHA1
b6ee85394352a1308fc1f6366b340e4970ef9e31
-
SHA256
43357749243d4d21c79746a724f75a65446245f3a60130c171bdcd2d98db5e08
-
SHA512
8b1bc468b54996ade74f572cf3cfd1e1f3d61dd3901d9d98aac17f26e0eb5d88d5e778dba45ea70abb497258ab656937b14ea22242650911c8aef95c8497fb4d
-
SSDEEP
12288:UIvX+jwzNG7iJwmzvRcvN6LOFMPFBHqpkfuwAH2LDfYe+:UG+saiuAicLXakf82L1+
Malware Config
Signatures
Files
-
43357749243d4d21c79746a724f75a65446245f3a60130c171bdcd2d98db5e08.exe windows x86
469e1be4a34fb8a31c4198f997398814
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
TerminateThread
GetProcessHandleCount
TerminateProcess
SetComputerNameExW
lstrcatA
SetLastError
GetProcAddress
LocalAlloc
SetProcessWorkingSetSize
GetCommTimeouts
CreateToolhelp32Snapshot
DuplicateHandle
SetProcessShutdownParameters
GlobalAlloc
GetFileInformationByHandle
GetThreadTimes
lstrcpyW
LocalFileTimeToFileTime
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LCMapStringW
OpenProcess
GetProcessTimes
GetTickCount
EscapeCommFunction
GetModuleHandleW
SetHandleInformation
GetCurrentProcess
SetConsoleTextAttribute
SetProcessAffinityMask
CloseHandle
ExitProcess
LCMapStringA
GetStringTypeW
GetStringTypeA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
MultiByteToWideChar
ReadFile
Sleep
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
SetStdHandle
HeapSize
LoadLibraryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
user32
DestroyIcon
GetScrollRange
SetScrollRange
LoadImageW
GetPropA
SendMessageA
BeginPaint
gdi32
StretchBlt
advapi32
GetUserNameA
GetSecurityDescriptorControl
SetSecurityDescriptorControl
LookupPrivilegeNameW
InitiateSystemShutdownA
GetSecurityDescriptorDacl
winhttp
WinHttpCloseHandle
WinHttpOpen
WinHttpWriteData
Exports
Exports
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.version Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.version Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ