Static task
static1
Behavioral task
behavioral1
Sample
4e09c63602bea79e6a9ad1f757013a72f6a16b1b7991c20c995296cfed7e0972.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
4e09c63602bea79e6a9ad1f757013a72f6a16b1b7991c20c995296cfed7e0972.exe
Resource
win10v2004-20220414-en
General
-
Target
4e09c63602bea79e6a9ad1f757013a72f6a16b1b7991c20c995296cfed7e0972
-
Size
346KB
-
MD5
6465ff23f054282177a15cc5f7ebc7ec
-
SHA1
92c0033e076de238169f17c76a41fcbb8d10930d
-
SHA256
4e09c63602bea79e6a9ad1f757013a72f6a16b1b7991c20c995296cfed7e0972
-
SHA512
507155b8dcc48b2e7a78a7771135588058f89985f7fe53ca546433a6d847d4b1c4dc61995d8159e3d5906eea64d49466cb78be236ca3bc5c448ae869b2328b16
-
SSDEEP
6144:0TJ1X2yOhQ6JVtoFtsGsFwq+QjY4hZHqdDYAsWisBngjyMhzlyYI2wSnJBxx:gJAyOG2VCtsGUwq+P4LOns9sBngjyIld
Malware Config
Signatures
Files
-
4e09c63602bea79e6a9ad1f757013a72f6a16b1b7991c20c995296cfed7e0972.exe windows x86
8db81cce9914747c7ca79cf056ce5ce6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
HeapAlloc
InterlockedDecrement
CompareFileTime
QueryDosDeviceA
FindFirstFileExW
LockFile
BackupSeek
GetModuleHandleW
GetTickCount
IsBadReadPtr
GetConsoleAliasesLengthA
CreateRemoteThread
GetDriveTypeA
TlsSetValue
GlobalAlloc
GetConsoleMode
CopyFileW
VerifyVersionInfoA
TerminateProcess
GetModuleFileNameW
CreateActCtxA
CompareStringW
GetStartupInfoA
GetLastError
GetLongPathNameW
GetProcAddress
FindVolumeMountPointClose
WriteProfileSectionA
OpenWaitableTimerA
OpenWaitableTimerW
SetFileApisToANSI
GlobalGetAtomNameW
GetModuleFileNameA
FindFirstChangeNotificationA
FreeEnvironmentStringsW
GetCurrentDirectoryA
CompareStringA
GetFileTime
GetConsoleCursorInfo
SetProcessShutdownParameters
SetFileShortNameA
GetVersionExA
TlsAlloc
GetWindowsDirectoryW
FileTimeToLocalFileTime
DeleteFileW
MoveFileA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement
DecodePointer
ExitProcess
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapValidate
EncodePointer
TlsGetValue
TlsFree
SetLastError
HeapCreate
WriteFile
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetACP
GetOEMCP
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
RaiseException
SetFilePointer
GetConsoleCP
SetStdHandle
CreateFileW
CloseHandle
FlushFileBuffers
Sections
.text Size: 309KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ