Static task
static1
Behavioral task
behavioral1
Sample
65857ed887dd83987dd38bc436209c04422b0f57836364938d3b424a82622bfe.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
65857ed887dd83987dd38bc436209c04422b0f57836364938d3b424a82622bfe.exe
Resource
win10v2004-20220721-en
General
-
Target
65857ed887dd83987dd38bc436209c04422b0f57836364938d3b424a82622bfe
-
Size
306KB
-
MD5
0977cbaaa148e024720bf83bfda4dea1
-
SHA1
84ef5452893acefaa69d1fcdb24a9821a9952b98
-
SHA256
65857ed887dd83987dd38bc436209c04422b0f57836364938d3b424a82622bfe
-
SHA512
e0f4a392203ab0e93a8c8d00aa3d98d5fa10df3ae20bfec8fa85766d8f1d48b2443e830abc8d736a3628484ffa98c7f003b3b3ad8de454f530e7f37c14c2a62b
-
SSDEEP
6144:DsrRb3E5Q5doPPdX5Aq4o52NObIGUHQM4Yw8HwTw:uRb3EsqPPdX5AqPOO17lKwTw
Malware Config
Signatures
Files
-
65857ed887dd83987dd38bc436209c04422b0f57836364938d3b424a82622bfe.exe windows x86
78ec7664a2f99443d25462b1ca9c20a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ActivateActCtx
GlobalLock
GetStringTypeExA
SetConsoleMode
ResetEvent
QueryDosDeviceW
WriteConsoleW
GetProcAddress
GetTickCount
GetLastError
GetThreadPriorityBoost
lstrlenA
GetCPInfo
GetSystemWindowsDirectoryA
GetNumaAvailableMemoryNode
GetOverlappedResult
InterlockedDecrement
FreeEnvironmentStringsA
GlobalAlloc
DosDateTimeToFileTime
FileTimeToDosDateTime
LockFile
GlobalWire
EnumDateFormatsW
AddConsoleAliasA
ReplaceFileA
GetVersionExA
TerminateProcess
UpdateResourceW
ExitProcess
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
DebugBreak
WriteFile
OutputDebugStringA
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
ReadFile
SetFilePointer
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
CreateFileA
advapi32
DestroyPrivateObjectSecurity
RegisterServiceCtrlHandlerW
CloseServiceHandle
OpenServiceA
MapGenericMask
DuplicateTokenEx
IsTokenRestricted
RegQueryInfoKeyA
GetSidIdentifierAuthority
SetServiceObjectSecurity
SetServiceStatus
GetSidLengthRequired
RegDeleteValueW
OpenProcessToken
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ