Static task
static1
Behavioral task
behavioral1
Sample
41d694e43be9e3ebbe67b107a261f0e024e051c44df14b5d6fee61f8c7dad2d9.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
41d694e43be9e3ebbe67b107a261f0e024e051c44df14b5d6fee61f8c7dad2d9.exe
Resource
win10v2004-20220414-en
General
-
Target
41d694e43be9e3ebbe67b107a261f0e024e051c44df14b5d6fee61f8c7dad2d9
-
Size
4.3MB
-
MD5
0c6226d4f64d300596c06d153486ecea
-
SHA1
34c60db1012c24aff685e9ac9c25c925c4236f08
-
SHA256
41d694e43be9e3ebbe67b107a261f0e024e051c44df14b5d6fee61f8c7dad2d9
-
SHA512
cf8f8cbba886833cc73ffe23bef72a59a32d4a7549e14dad24af75746364f6485642844eb3c32d704525df0cfb5dcfd92fd43c89b240307bceca244be6a9d91b
-
SSDEEP
98304:6ecZVxAlKK4pwLmILLcGW1xFHO13zgvZ5c4JsUb7hD62Ot:6ec/e2ALOOd8tJsOhe2O
Malware Config
Signatures
Files
-
41d694e43be9e3ebbe67b107a261f0e024e051c44df14b5d6fee61f8c7dad2d9.exe windows x86
3d6e94a5c1934216b129a3a422112e54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
CreateMutexW
SetThreadContext
OpenFile
SetFilePointer
lstrlenA
TlsGetValue
SetLocalTime
DebugActiveProcessStop
SetWaitableTimer
InterlockedIncrement
ReadConsoleOutputAttribute
CreateJobObjectW
GetNamedPipeHandleStateA
WaitForSingleObject
CallNamedPipeW
GetProcessPriorityBoost
LocalFlags
VirtualFree
FindNextVolumeMountPointA
EnumTimeFormatsW
SetCommState
GetCommandLineA
SetProcessPriorityBoost
LoadLibraryW
_hread
GetSystemPowerStatus
SetSystemTimeAdjustment
SetConsoleMode
FileTimeToSystemTime
ReadFile
GetBinaryTypeW
GetACP
RaiseException
GetLargestConsoleWindowSize
FreeLibraryAndExitThread
GetHandleInformation
GetLastError
GetCurrentDirectoryW
GetProcAddress
HeapSize
BeginUpdateResourceW
SetStdHandle
EnterCriticalSection
OpenMutexA
LocalAlloc
BuildCommDCBAndTimeoutsW
AddAtomW
GetCommMask
GetSystemTime
lstrcpyA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoA
RtlUnwind
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
GetModuleFileNameA
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LoadLibraryA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
user32
GetAncestor
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4.2MB - Virtual size: 43.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ