Static task
static1
Behavioral task
behavioral1
Sample
c3fead74c19d0f5c9e5f300107e466dbd3b7bd3f2c2c149836510fb987ff8ed0.exe
Resource
win7-20220715-en
General
-
Target
c3fead74c19d0f5c9e5f300107e466dbd3b7bd3f2c2c149836510fb987ff8ed0
-
Size
6.7MB
-
MD5
d39b460f431a1afb6744aef77dbff77c
-
SHA1
95037203e234bd3d0929d2b9524d43e986fdd957
-
SHA256
c3fead74c19d0f5c9e5f300107e466dbd3b7bd3f2c2c149836510fb987ff8ed0
-
SHA512
81bb207cd5ddd28af61847641ac5714702bbdd3a8bb9211d76dd072996f443000abf109529eefcb3e1c7ef92d6ffd5b0380995156a61007b3690da1257cf4a9d
-
SSDEEP
196608:8ZIHU0w8KB6h2UkWXJ0k344SF1q1Yu1plJ1IE:q9BnvqxYE
Malware Config
Signatures
Files
-
c3fead74c19d0f5c9e5f300107e466dbd3b7bd3f2c2c149836510fb987ff8ed0.exe windows x86
f9fc4b072bd2baebea93610910baca29
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
GetFileSizeEx
CreateDirectoryExA
EnumCalendarInfoA
GetQueuedCompletionStatus
MapUserPhysicalPages
DisconnectNamedPipe
ProcessIdToSessionId
GetBinaryTypeA
GetThreadPriority
GlobalAlloc
AddConsoleAliasA
InitAtomTable
GetProcAddress
LCMapStringW
GetModuleHandleW
AddAtomW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetFileType
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
GetConsoleMode
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 47.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ