Static task
static1
Behavioral task
behavioral1
Sample
4ad959759e71a47614f6059dcc8ec03ddd0cfda08b2f37a7d842277bebb422ad.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4ad959759e71a47614f6059dcc8ec03ddd0cfda08b2f37a7d842277bebb422ad.exe
Resource
win10v2004-20220414-en
General
-
Target
4ad959759e71a47614f6059dcc8ec03ddd0cfda08b2f37a7d842277bebb422ad
-
Size
433KB
-
MD5
789642b1d784a05de91de6f74a2e61ba
-
SHA1
82a27918673c1c0a41e9739f0f41ca25620ed9e7
-
SHA256
4ad959759e71a47614f6059dcc8ec03ddd0cfda08b2f37a7d842277bebb422ad
-
SHA512
59f703572b07431298eceda28d8195c00b61c9b6afe9a2477fe605400166be60f4281a4c48dd1e9ffad90eea7aa7da5d31638cb3235056f403b85f5dfa1d1cd5
-
SSDEEP
12288:gwb+NbFPYZksB4Xu75ps0edOBwLI27whaivP:vbsQZkMV75uxO5e2RP
Malware Config
Signatures
Files
-
4ad959759e71a47614f6059dcc8ec03ddd0cfda08b2f37a7d842277bebb422ad.exe windows x86
d71f75e37d1a24a5c04d5874020b751d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapLock
WaitForSingleObject
GetNamedPipeHandleStateW
DosDateTimeToFileTime
CallNamedPipeA
EnumResourceTypesA
EnumResourceNamesA
TerminateProcess
ReleaseActCtx
GetConsoleAliasesLengthW
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
GetCommConfig
GetDriveTypeW
FreeEnvironmentStringsA
CreateTimerQueueTimer
FindNextVolumeW
LeaveCriticalSection
WriteConsoleInputW
TlsGetValue
SetComputerNameExW
FindAtomA
BuildCommDCBAndTimeoutsW
GlobalAlloc
EnterCriticalSection
GetCommandLineW
InterlockedExchange
CopyFileA
OutputDebugStringA
FormatMessageW
GetPriorityClass
WritePrivateProfileStringA
HeapValidate
TerminateThread
GlobalUnfix
GetProcessHeap
GetStartupInfoA
CreatePipe
GetCPInfoExA
GetWindowsDirectoryA
GetSystemWow64DirectoryA
WriteProfileSectionA
GetCalendarInfoW
DebugBreak
GetConsoleCursorInfo
SetLastError
DeleteVolumeMountPointW
DebugActiveProcessStop
GetConsoleAliasExesLengthW
lstrcmpA
GetPrivateProfileSectionNamesW
IsBadHugeWritePtr
GetProcAddress
GetSystemWindowsDirectoryA
FindCloseChangeNotification
CreateActCtxW
GetMailslotInfo
GetPrivateProfileIntA
_lread
InterlockedDecrement
DefineDosDeviceW
SetVolumeMountPointA
EndUpdateResourceW
WriteConsoleW
VirtualProtect
GetLastError
DeleteCriticalSection
GetFileAttributesExA
FileTimeToSystemTime
GetVolumePathNameW
GetConsoleMode
HeapSetInformation
GetComputerNameA
FindActCtxSectionStringW
WriteProcessMemory
MoveFileExA
DisableThreadLibraryCalls
GlobalCompact
UnregisterWait
DeleteAtom
FormatMessageA
FatalExit
InterlockedCompareExchange
WaitNamedPipeW
SetLocalTime
EnumCalendarInfoExW
FreeEnvironmentStringsW
GetOverlappedResult
GetPrivateProfileStructA
OpenSemaphoreA
SetMailslotInfo
lstrcpyW
VerLanguageNameW
GetFileType
SetConsoleCP
GetConsoleAliasA
GetLargestConsoleWindowSize
CreateIoCompletionPort
WriteConsoleInputA
CreateMailslotW
EnumDateFormatsA
GetCommState
_lopen
GetWriteWatch
GetPrivateProfileStringW
ClearCommError
ChangeTimerQueueTimer
SetSystemTime
LockFile
GetConsoleAliasExesLengthA
SetFirmwareEnvironmentVariableW
MoveFileW
GetConsoleDisplayMode
GetSystemDefaultLangID
SetFilePointer
PostQueuedCompletionStatus
AreFileApisANSI
OpenWaitableTimerW
GetProcessVersion
GetNamedPipeHandleStateA
FillConsoleOutputCharacterA
FindNextVolumeMountPointA
WriteProfileStringA
AddAtomA
WriteConsoleOutputCharacterA
QueryInformationJobObject
QueryDosDeviceW
GetBinaryTypeW
InitAtomTable
VirtualAlloc
InterlockedPushEntrySList
LoadLibraryA
CreateFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
GetCommandLineA
IsBadReadPtr
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
InterlockedIncrement
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
LoadLibraryW
GetConsoleCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleA
CloseHandle
user32
OemToCharW
advapi32
GetFileSecurityA
winhttp
WinHttpReadData
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 158KB - Virtual size: 38.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ