Static task
static1
Behavioral task
behavioral1
Sample
673eb11c4cd784bdc37427f244469103362bab82831f65336f42cd294643d8a4.exe
Resource
win10-20220414-en
General
-
Target
673eb11c4cd784bdc37427f244469103362bab82831f65336f42cd294643d8a4
-
Size
205KB
-
MD5
20d1ed91f7e18e39ca1db949fd87c2bc
-
SHA1
11655b9fd30ad3682fcb4bce822e60c6486f12e8
-
SHA256
673eb11c4cd784bdc37427f244469103362bab82831f65336f42cd294643d8a4
-
SHA512
afe35e816646e0ec2c559b8e0af42b2d213b3f92936f1ef7cce6e8ff0aa71932de6ba6ca894a97bce8d7829defff74042fc1796152033e0f6a5ea8da771b1205
-
SSDEEP
3072:TOrISJ5Tp2EX8M9r5uSoPJQ4AWgb1rn3ADOjS08ogRBuul1fRLeM/h3P7:TUISJ5dBz9APUWgbp3AD2S0IBuW15a
Malware Config
Signatures
Files
-
673eb11c4cd784bdc37427f244469103362bab82831f65336f42cd294643d8a4.exe windows x86
b17c65b0a8ac01a9e7c26566c998beb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
GetLocalTime
InterlockedDecrement
GetLocaleInfoA
InterlockedCompareExchange
_hwrite
CancelWaitableTimer
GetSystemDirectoryA
CreateEventW
ReadConsoleA
BuildCommDCBA
GetConsoleAliasExesLengthA
SetSystemTimeAdjustment
PeekConsoleInputW
EnumDateFormatsA
CreateFileW
RegisterWaitForSingleObjectEx
LoadLibraryA
VerifyVersionInfoW
WaitNamedPipeA
GetEnvironmentStrings
FindResourceExW
VirtualProtect
GetFirmwareEnvironmentVariableW
GetModuleFileNameW
BeginUpdateResourceW
EnumCalendarInfoExA
LoadLibraryW
WriteConsoleA
DeleteFileW
FillConsoleOutputCharacterA
GetProcAddress
GetModuleHandleW
GetUserDefaultLCID
FindFirstChangeNotificationW
GetFileAttributesExA
GetCalendarInfoW
SetConsoleTitleA
GetBinaryTypeW
GlobalAlloc
GetComputerNameExA
FindNextFileA
OpenJobObjectA
HeapSize
_lclose
GetComputerNameW
TlsGetValue
SetCalendarInfoW
SetComputerNameW
CreateDirectoryExA
InitializeCriticalSectionAndSpinCount
FindFirstChangeNotificationA
GetVolumePathNameW
GetProcessHandleCount
GetThreadLocale
GetSystemDefaultLangID
GetCurrentProcess
ReadFile
GetStringTypeW
HeapFree
GetDiskFreeSpaceA
RaiseException
RtlUnwind
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
HeapAlloc
GetLastError
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
SetStdHandle
WideCharToMultiByte
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapReAlloc
WriteConsoleW
user32
ClientToScreen
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 32.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ