@Sticky@16
Static task
static1
Behavioral task
behavioral1
Sample
86e18b9384f0770bd1581107c17024a6152e671c8b50978cf3b9b91220fe3ed0.exe
Resource
win7-20220715-en
General
-
Target
86e18b9384f0770bd1581107c17024a6152e671c8b50978cf3b9b91220fe3ed0
-
Size
3.7MB
-
MD5
25352270e16b2f8edf0465daedb85e20
-
SHA1
f180c2435917cf8f8ce7f1f00df9342c8eaa19d8
-
SHA256
86e18b9384f0770bd1581107c17024a6152e671c8b50978cf3b9b91220fe3ed0
-
SHA512
3a62ca288a9665b888ce3e5a5b3e69e48f884f644acc7fc6c6f303c69e11983c70f8f789bd98c86805a9e199656c03a457132154c6f42ffdfb295918a8684091
-
SSDEEP
98304:4xpVBjGfJwpJ0Eqj7vk8vyJGchTOKTeB:odAwpRK788aJlNc
Malware Config
Signatures
Files
-
86e18b9384f0770bd1581107c17024a6152e671c8b50978cf3b9b91220fe3ed0.exe windows x86
49bb8856ae16bead7945d456b9a129b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
InterlockedCompareExchange
GetNumaAvailableMemoryNode
GetModuleHandleW
GetTickCount
GlobalAlloc
SizeofResource
SetConsoleMode
TerminateProcess
GetACP
GetStringTypeExA
ResetEvent
GetProcessWorkingSetSize
CreateEventW
GetCommTimeouts
lstrcatW
GetCurrentThreadId
DeleteFileW
FindActCtxSectionStringW
_lwrite
UpdateResourceA
EnumDateFormatsExW
FindFirstChangeNotificationW
GetNumaNodeProcessorMask
GetProcAddress
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLastError
HeapFree
CloseHandle
SetFilePointer
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
SetLastError
Sleep
ExitProcess
RtlUnwind
SetStdHandle
FlushFileBuffers
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapAlloc
IsProcessorFeaturePresent
LoadLibraryW
GetModuleFileNameW
CreateFileW
user32
GetCaretPos
advapi32
AddAuditAccessAce
winhttp
WinHttpCreateUrl
msimg32
TransparentBlt
Exports
Exports
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3.6MB - Virtual size: 54.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rumamu Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ