Static task
static1
Behavioral task
behavioral1
Sample
41943e66355d19b291f5ea87a2284cab0a7f32cc05f42efb936216859e52756f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
41943e66355d19b291f5ea87a2284cab0a7f32cc05f42efb936216859e52756f.exe
Resource
win10v2004-20220414-en
General
-
Target
41943e66355d19b291f5ea87a2284cab0a7f32cc05f42efb936216859e52756f
-
Size
321KB
-
MD5
81219362437edad064425e27bf2a1305
-
SHA1
116ae773fbdf2b4abebecd8331b790c9b17860fe
-
SHA256
41943e66355d19b291f5ea87a2284cab0a7f32cc05f42efb936216859e52756f
-
SHA512
90105e1d6f49e9ff20c2b6fdb185a17d18c018c96d260d81eaff6db6e5e3d19af55e34408fa088a8c5dced9c6b8abd9517292fe49583d065017b78b55ba63494
-
SSDEEP
6144:uYGr72IKAMl49DNXjaJf4A3aP0YIgimjo:kH2mc4NNGnKPVmz
Malware Config
Signatures
Files
-
41943e66355d19b291f5ea87a2284cab0a7f32cc05f42efb936216859e52756f.exe windows x86
fcb25543ea49a629a0087e4ea49dcf1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
lstrlenA
GlobalAlloc
PrepareTape
LoadLibraryA
FindFirstVolumeMountPointW
GetThreadPriority
VirtualProtect
AddConsoleAliasA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetStdHandle
GetModuleHandleA
user32
DrawCaption
MapVirtualKeyW
IsChild
DeleteMenu
CreateCursor
GetWindowTextLengthA
GetMenuInfo
GetWindow
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ