Static task
static1
Behavioral task
behavioral1
Sample
9093361386bcaa69f7a1da458a55d766248ce31c2533eeb5e71219ab90c74344.exe
Resource
win7-20220718-en
General
-
Target
9093361386bcaa69f7a1da458a55d766248ce31c2533eeb5e71219ab90c74344
-
Size
465KB
-
MD5
5256820c516e2d3f8d4f9ee900e643f4
-
SHA1
211f35a241ed5509b1fda5d08d7af89a8359ed4a
-
SHA256
9093361386bcaa69f7a1da458a55d766248ce31c2533eeb5e71219ab90c74344
-
SHA512
9d855c2eaa000d05ff2a63b59486f6fa79ebbd1873be7a8ad0f67584b82b1f2eb3b6d63b0357bf5461f4358db0254649233037c839f84d98c44d1d551583291b
-
SSDEEP
6144:Gqvw4ow7C3PJWULubUonZNFuoNZGy/Al40g2NGNPaPchrYypu:lYO7UPQjb1nZvong2NkPaEhrv
Malware Config
Signatures
Files
-
9093361386bcaa69f7a1da458a55d766248ce31c2533eeb5e71219ab90c74344.exe windows x86
ab4e7cd5f0cc458550b95a85516579ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
SetFilePointer
GetCurrentActCtx
SetHandleInformation
GetConsoleTitleA
WaitNamedPipeW
FindActCtxSectionStringA
GetConsoleCP
GetFileAttributesA
VerifyVersionInfoA
HeapQueryInformation
GetModuleFileNameW
lstrlenW
SetDefaultCommConfigA
GetLastError
GetProcAddress
ReadFileEx
VerLanguageNameW
LoadLibraryA
WriteConsoleA
LocalAlloc
GetNumberFormatW
GetTapeParameters
GetOEMCP
GetStringTypeW
VirtualProtect
GetWindowsDirectoryW
GetPrivateProfileSectionW
LCMapStringW
DeleteFileA
lstrcpyA
DecodePointer
EncodePointer
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
HeapFree
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
HeapAlloc
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
CreateFileA
SetStdHandle
GetCPInfo
GetACP
IsValidCodePage
GetConsoleMode
FlushFileBuffers
LoadLibraryW
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
IsProcessorFeaturePresent
WriteConsoleW
HeapSize
CreateFileW
advapi32
DeregisterEventSource
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 351KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wuci Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.namo Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yidoy Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kocen Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ