Static task
static1
Behavioral task
behavioral1
Sample
d8392e4d42d9a1c91e08ba2ed4bdd3cc.exe
Resource
win7-20220414-en
General
-
Target
d8392e4d42d9a1c91e08ba2ed4bdd3cc
-
Size
321KB
-
MD5
d8392e4d42d9a1c91e08ba2ed4bdd3cc
-
SHA1
49db632eccf7593fb97f86457ee80876f9c0c89c
-
SHA256
7491a8a4866c578d50f6c0ae8addf97f40ecdf643d2c303b674dfe0dc36ebc13
-
SHA512
4bec5a61aeec62b41aff6ddce7e2b20dc48c28373d152d9844cc81a1621cfc44922b999b5c3e405e0cc49a5729f7a91a2bfa9a6f8c84a8b9d45d87d6dd72602a
-
SSDEEP
6144:9x5spRCzWkUEka+3Iq41GTkOs7QYbHEWCMLLaFIVjwQo:psqC5zLYq41GTkrDHTjLaFIVjg
Malware Config
Signatures
Files
-
d8392e4d42d9a1c91e08ba2ed4bdd3cc.exe windows x86
66bf435feaaa12e148aa302420048fbf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
GetConsoleAliasExesLengthW
GetNamedPipeHandleStateW
GetQueuedCompletionStatus
FillConsoleOutputCharacterW
EnumSystemCodePagesA
LocalSize
GetVolumeNameForVolumeMountPointA
WriteConsoleInputA
EnumDateFormatsW
FindNextFileA
CopyFileExA
BuildCommDCBAndTimeoutsW
VerifyVersionInfoA
VirtualLock
SetVolumeLabelW
UnlockFile
GetProfileSectionA
VerifyVersionInfoW
IsSystemResumeAutomatic
GetProcessPriorityBoost
GlobalGetAtomNameW
DeleteFileW
FindNextVolumeMountPointW
TlsSetValue
LoadResource
GetConsoleTitleA
GetComputerNameExW
OpenEventW
GetModuleHandleA
GetSystemDirectoryW
GetDriveTypeW
BuildCommDCBAndTimeoutsA
GetShortPathNameW
ReleaseActCtx
GetCommandLineA
InterlockedExchange
CopyFileW
CreateActCtxW
FormatMessageW
GetModuleFileNameA
EnterCriticalSection
FindNextVolumeW
GetExitCodeThread
LoadLibraryA
CreateNamedPipeW
GetUserDefaultLCID
GetConsoleAliasesLengthA
WriteProfileSectionW
AddAtomA
InterlockedDecrement
HeapSize
_hread
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotW
GetCPInfoExA
GetSystemWow64DirectoryW
SetLastError
GetPrivateProfileIntW
GetConsoleAliasExesLengthA
DebugBreak
EndUpdateResourceA
GetTickCount
OpenFileMappingA
GetDefaultCommConfigA
VirtualAlloc
TerminateThread
GetACP
GetDiskFreeSpaceExW
DefineDosDeviceW
TerminateProcess
EnumResourceLanguagesW
GetCPInfoExW
SetConsoleTextAttribute
GlobalGetAtomNameA
IsProcessInJob
MoveFileA
WriteConsoleW
GetProcAddress
lstrcatA
WriteConsoleOutputA
WritePrivateProfileStructW
GetDriveTypeA
GetFileAttributesA
CopyFileA
GetComputerNameExA
ResetEvent
MoveFileW
FreeLibrary
GetCommState
InterlockedExchangeAdd
DeleteFiber
EnumDateFormatsA
SetVolumeMountPointA
GetOverlappedResult
GlobalAlloc
SetThreadPriorityBoost
SetFileShortNameW
GetFileAttributesW
SetCalendarInfoA
ConvertFiberToThread
SetComputerNameA
GetConsoleAliasesA
EnumDateFormatsExW
SetTimeZoneInformation
GetConsoleOutputCP
MoveFileWithProgressA
GetStdHandle
SetLocalTime
GetStringTypeW
EnumSystemLocalesA
GetConsoleAliasesLengthW
CreateMemoryResourceNotification
OpenSemaphoreW
GetModuleHandleExA
LoadLibraryW
GetCurrentActCtx
SetFileTime
GetFileType
GetNamedPipeHandleStateA
UnhandledExceptionFilter
SetProcessShutdownParameters
lstrcpynA
GlobalUnWire
FillConsoleOutputCharacterA
GetCompressedFileSizeW
ReadConsoleA
MapUserPhysicalPages
WriteConsoleOutputCharacterW
OpenJobObjectW
CreateFileW
SetTimerQueueTimer
GetFileInformationByHandle
SetUnhandledExceptionFilter
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
GetLastError
SetFilePointer
SetStdHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InterlockedIncrement
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
Sleep
ExitProcess
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
FlushFileBuffers
WriteConsoleA
MultiByteToWideChar
GetStringTypeA
LCMapStringA
LCMapStringW
GetLocaleInfoA
CreateFileA
CloseHandle
ReadFile
DeleteFileA
user32
CharUpperA
winhttp
WinHttpWriteData
Sections
.text Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ